{"api_version":"v1","generated_at":"2026-10-07T23:35:00+00:00","product":{"cve_count":10,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-keycloak-keycloak-e417e60bcca4","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/keycloak","name":"keycloak","next_cursor":null,"observations":[{"affected":"Keycloak: 26.7.0 < 26.7.4","affected_versions_present":true,"cve_id":"CVE-2026-90997","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-90997","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-09-25T06:42:50.534Z","patch_url":"","primary_source":"","published":"2026-09-17T18:47:34.059Z"},{"affected":"26.5.0 < 26.5.3","affected_versions_present":true,"cve_id":"CVE-2026-1609","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-1609","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-10T12:05:51.935Z","patch_url":"","primary_source":"","published":"2026-07-16T00:26:10.772Z"},{"affected":"< 26.4.4","affected_versions_present":true,"cve_id":"CVE-2025-12150","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-12150","fixed":"26.2.11-1 < *; 26.2-12 < *; 26.4.4-1 < *; 26.4-3 < *","last_modified":"2026-08-10T01:55:06.941Z","patch_url":"https://access.redhat.com/errata/RHSA-2025:21370","primary_source":"","published":"2026-02-27T08:10:15.448Z"},{"affected":"< 26.4.6","affected_versions_present":true,"cve_id":"CVE-2025-13467","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-13467","fixed":"26.2.11-1 < *; 26.2-12 < *; 26.4.6-1 < *; 26.4-6 < *; 26.4-5 < *","last_modified":"2025-12-23T21:00:22.666Z","patch_url":"https://access.redhat.com/errata/RHSA-2025:22088","primary_source":"","published":"2025-11-25T16:02:21.105Z"},{"affected":"< 26.4.4","affected_versions_present":true,"cve_id":"CVE-2025-11538","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-11538","fixed":"26.4.4-1 < *; 26.4-3 < *","last_modified":"2025-12-19T21:26:09.332Z","patch_url":"https://access.redhat.com/errata/RHSA-2025:21370","primary_source":"","published":"2025-11-13T16:47:53.933Z"},{"affected":"< 26.0.0","affected_versions_present":true,"cve_id":"CVE-2025-12390","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-12390","fixed":"26.2.11-1 < *; 26.2-12 < *; 26.4.4-1 < *; 26.4-3 < *","last_modified":"2026-07-30T09:41:42.257Z","patch_url":"https://access.redhat.com/errata/RHSA-2025:21370","primary_source":"","published":"2025-10-28T13:23:34.634Z"},{"affected":"keycloak: < 26.4.4","affected_versions_present":true,"cve_id":"CVE-2025-10939","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-10939","fixed":"Red Hat build of Keycloak 26.4: 26.4.4-1 < *, 26.4-3 < *","last_modified":"2026-08-31T00:28:27.541Z","patch_url":"https://access.redhat.com/errata/RHSA-2025:21370","primary_source":"","published":"2025-10-28T03:08:30.103Z"},{"affected":"< 26.4.3","affected_versions_present":true,"cve_id":"CVE-2025-12110","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-12110","fixed":"26.2.11-1 < *; 26.2-12 < *; 26.4.4-1 < *; 26.4-3 < *","last_modified":"2026-01-20T21:04:49.198Z","patch_url":"https://access.redhat.com/errata/RHSA-2025:21370","primary_source":"","published":"2025-10-23T14:19:24.752Z"},{"affected":"< 26.4.1","affected_versions_present":true,"cve_id":"CVE-2025-11429","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-11429","fixed":"26.2.11-1 < *; 26.2-12 < *","last_modified":"2026-01-20T21:16:58.585Z","patch_url":"https://access.redhat.com/errata/RHSA-2025:22088","primary_source":"","published":"2025-10-23T14:09:31.901Z"},{"affected":"< 26.2.9","affected_versions_present":true,"cve_id":"CVE-2025-10044","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-10044","fixed":"26.0.17-1 < *; 26.0-21 < *; 26.0-22 < *; 26.2.9-1 < *; 26.2-9 < *","last_modified":"2025-12-19T21:46:30.461Z","patch_url":"https://access.redhat.com/errata/RHSA-2025:16399","primary_source":"","published":"2025-09-05T19:59:04.454Z"},{"affected":"< 26.3.4","affected_versions_present":true,"cve_id":"CVE-2025-9162","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-9162","fixed":"26.0.15-1 < *; 26.0-18 < *; 26.0-19 < *; 26.2.8-1 < *; 26.2-8 < *","last_modified":"2025-12-19T21:46:23.680Z","patch_url":"https://access.redhat.com/errata/RHSA-2025:15336","primary_source":"","published":"2025-08-21T15:40:25.136Z"},{"affected":"keycloak: < 26.3.3","affected_versions_present":true,"cve_id":"CVE-2025-8419","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-8419","fixed":"Red Hat build of Keycloak 26.0: 26.0.15-1 < *, 26.0-18 < *, 26.0-19 < *; Red Hat build of Keycloak 26.2: 26.2.8-1 < *, 26.2-8 < *","last_modified":"2026-08-31T00:28:11.470Z","patch_url":"https://access.redhat.com/errata/RHSA-2025:15336","primary_source":"","published":"2025-08-06T17:10:02.560Z"},{"affected":"See the vendor and CVE records for the affected range.","affected_versions_present":false,"cve_id":"CVE-2022-4361","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-4361","fixed":"21.1.2","last_modified":"2024-11-12T19:43:42.651Z","patch_url":"https://github.com/keycloak/keycloak/commit/a1cfe6e24e5b34792699a00b8b4a8016a5929e3a","primary_source":"","published":"2023-07-07T19:57:44.567Z"},{"affected":"8.0.2; 9.0.0","affected_versions_present":true,"cve_id":"CVE-2020-10686","cve_url":"https://cve.blacktree.nl/cve/CVE-2020-10686","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-04T11:06:10.651Z","patch_url":"","primary_source":"","published":"2020-05-04T20:05:37.000Z"},{"affected":"fixed in 8.0.0","affected_versions_present":true,"cve_id":"CVE-2019-14820","cve_url":"https://cve.blacktree.nl/cve/CVE-2019-14820","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-05T00:26:39.126Z","patch_url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14820","primary_source":"","published":"2020-01-08T14:50:44.000Z"}],"source_generated_at":"2026-10-07T06:21:30.017Z","vendor":"keycloak"}}