← All credits

Red Hat would like to thank Nassim Abbaoui (OVHcloud) and Marcin Naskręt (UNSHADE) for reporting this issue.

1 vulnerability record and advisories credit this contributor.

CVE-2026-120984
Keycloak-services: keycloak-services: manage-clients to arbitrary code execution through inline javascript policy import