{"api_version":"v1","generated_at":"2026-10-08T10:35:00+00:00","product":{"cve_count":22,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-red-hat-keycloak-366c77be31b8","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/keycloak","name":"keycloak","next_cursor":null,"observations":[{"affected":"before (excluding) 12.0.0","affected_versions_present":true,"cve_id":"CVE-2020-14366","cve_url":"https://cve.blacktree.nl/cve/CVE-2020-14366","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-04T12:46:33.307Z","patch_url":"","primary_source":"","published":"2020-11-09T16:50:08.000Z"},{"affected":"keycloak versions before 10.0.0","affected_versions_present":true,"cve_id":"CVE-2020-1758","cve_url":"https://cve.blacktree.nl/cve/CVE-2020-1758","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-04T06:46:30.910Z","patch_url":"","primary_source":"","published":"2020-05-15T18:52:52.000Z"},{"affected":"before 11.0.0","affected_versions_present":true,"cve_id":"CVE-2020-1714","cve_url":"https://cve.blacktree.nl/cve/CVE-2020-1714","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-04T06:46:30.830Z","patch_url":"https://github.com/keycloak/keycloak/pull/7053","primary_source":"","published":"2020-05-13T18:25:56.000Z"},{"affected":"All versions before 8.0.0","affected_versions_present":true,"cve_id":"CVE-2020-1718","cve_url":"https://cve.blacktree.nl/cve/CVE-2020-1718","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-04T06:46:30.307Z","patch_url":"","primary_source":"","published":"2020-05-12T20:25:29.000Z"},{"affected":"All versions before 9.0.2","affected_versions_present":true,"cve_id":"CVE-2020-1724","cve_url":"https://cve.blacktree.nl/cve/CVE-2020-1724","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-04T06:46:30.888Z","patch_url":"","primary_source":"","published":"2020-05-11T20:10:24.000Z"},{"affected":"All versions before 9.0.0","affected_versions_present":true,"cve_id":"CVE-2020-1698","cve_url":"https://cve.blacktree.nl/cve/CVE-2020-1698","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-04T06:46:29.965Z","patch_url":"","primary_source":"","published":"2020-05-11T13:00:18.000Z"},{"affected":"all keycloak versions prior to 9.0.1","affected_versions_present":true,"cve_id":"CVE-2020-1744","cve_url":"https://cve.blacktree.nl/cve/CVE-2020-1744","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-04T06:46:30.879Z","patch_url":"","primary_source":"","published":"2020-03-24T00:00:00.000Z"},{"affected":"all versions of keycloak operator before keycloak operator 8.0.2","affected_versions_present":true,"cve_id":"CVE-2020-1731","cve_url":"https://cve.blacktree.nl/cve/CVE-2020-1731","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-04T06:46:30.501Z","patch_url":"","primary_source":"","published":"2020-03-02T16:22:36.000Z"},{"affected":"All versions before 9.0.0","affected_versions_present":true,"cve_id":"CVE-2020-1697","cve_url":"https://cve.blacktree.nl/cve/CVE-2020-1697","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-04T06:46:30.433Z","patch_url":"","primary_source":"","published":"2020-02-10T14:13:58.000Z"},{"affected":"before 8.0.0","affected_versions_present":true,"cve_id":"CVE-2019-14837","cve_url":"https://cve.blacktree.nl/cve/CVE-2019-14837","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-05T00:26:39.127Z","patch_url":"https://github.com/keycloak/keycloak/commit/9a7c1a91a59ab85e7f8889a505be04a71580777f","primary_source":"","published":"2020-01-07T16:33:21.000Z"},{"affected":"up to keycloak 6.0.1","affected_versions_present":true,"cve_id":"CVE-2019-10201","cve_url":"https://cve.blacktree.nl/cve/CVE-2019-10201","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-04T22:17:19.324Z","patch_url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10201","primary_source":"","published":"2019-08-14T16:09:39.000Z"},{"affected":"up to keycloak 6.0.1","affected_versions_present":true,"cve_id":"CVE-2019-10199","cve_url":"https://cve.blacktree.nl/cve/CVE-2019-10199","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-04T22:17:19.336Z","patch_url":"","primary_source":"","published":"2019-08-14T16:07:31.000Z"},{"affected":"6.0.2","affected_versions_present":true,"cve_id":"CVE-2019-3875","cve_url":"https://cve.blacktree.nl/cve/CVE-2019-3875","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-04T19:19:18.609Z","patch_url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3875","primary_source":"","published":"2019-06-12T13:51:38.000Z"},{"affected":"4.8.3","affected_versions_present":true,"cve_id":"CVE-2019-10157","cve_url":"https://cve.blacktree.nl/cve/CVE-2019-10157","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-04T22:10:10.057Z","patch_url":"","primary_source":"","published":"2019-06-12T13:48:42.000Z"},{"affected":"affects up to 6.0.0 version","affected_versions_present":true,"cve_id":"CVE-2019-3868","cve_url":"https://cve.blacktree.nl/cve/CVE-2019-3868","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-04T19:19:18.678Z","patch_url":"","primary_source":"","published":"2019-04-24T15:21:50.000Z"},{"affected":"3.2.1.Final","affected_versions_present":true,"cve_id":"CVE-2018-14658","cve_url":"https://cve.blacktree.nl/cve/CVE-2018-14658","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-05T09:38:13.033Z","patch_url":"","primary_source":"","published":"2018-11-13T19:00:00.000Z"},{"affected":"4.2.1.Final, 4.3.0.Final","affected_versions_present":true,"cve_id":"CVE-2018-14657","cve_url":"https://cve.blacktree.nl/cve/CVE-2018-14657","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-05T09:38:13.017Z","patch_url":"","primary_source":"","published":"2018-11-13T19:00:00.000Z"},{"affected":"3.4.3.Final, 4.0.0.Beta2, 4.3.0.Final","affected_versions_present":true,"cve_id":"CVE-2018-14655","cve_url":"https://cve.blacktree.nl/cve/CVE-2018-14655","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-05T09:38:13.384Z","patch_url":"","primary_source":"","published":"2018-11-13T19:00:00.000Z"},{"affected":"3.4.3.Final","affected_versions_present":true,"cve_id":"CVE-2018-10894","cve_url":"https://cve.blacktree.nl/cve/CVE-2018-10894","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-05T07:54:34.911Z","patch_url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10894","primary_source":"","published":"2018-08-01T17:00:00.000Z"},{"affected":"2.3.0","affected_versions_present":true,"cve_id":"CVE-2016-8609","cve_url":"https://cve.blacktree.nl/cve/CVE-2016-8609","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-06T02:27:41.009Z","patch_url":"","primary_source":"","published":"2018-08-01T17:00:00.000Z"},{"affected":"2.5.5","affected_versions_present":true,"cve_id":"CVE-2017-2646","cve_url":"https://cve.blacktree.nl/cve/CVE-2017-2646","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-05T14:02:07.264Z","patch_url":"","primary_source":"","published":"2018-07-27T18:00:00.000Z"},{"affected":"2.5.1","affected_versions_present":true,"cve_id":"CVE-2017-2582","cve_url":"https://cve.blacktree.nl/cve/CVE-2017-2582","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-05T13:55:06.197Z","patch_url":"https://github.com/keycloak/keycloak/pull/3715/commits/0cb5ba0f6e83162d221681f47b470c3042eef237","primary_source":"","published":"2018-07-26T17:00:00.000Z"},{"affected":"2.5.1","affected_versions_present":true,"cve_id":"CVE-2017-2585","cve_url":"https://cve.blacktree.nl/cve/CVE-2017-2585","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-09-16T22:56:17.924Z","patch_url":"","primary_source":"","published":"2018-03-12T15:00:00.000Z"},{"affected":"2.4.0","affected_versions_present":true,"cve_id":"CVE-2016-8629","cve_url":"https://cve.blacktree.nl/cve/CVE-2016-8629","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-09-16T17:52:54.232Z","patch_url":"","primary_source":"","published":"2018-03-12T15:00:00.000Z"},{"affected":"before 3.4.2.Final","affected_versions_present":true,"cve_id":"CVE-2017-12161","cve_url":"https://cve.blacktree.nl/cve/CVE-2017-12161","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-05T18:28:16.559Z","patch_url":"https://github.com/keycloak/keycloak-documentation/pull/268/commits/a2b58aadee42af2c375b72e86dffc2cf23cc3770","primary_source":"","published":"2018-02-21T18:00:00.000Z"},{"affected":"3.4.0","affected_versions_present":true,"cve_id":"CVE-2017-12160","cve_url":"https://cve.blacktree.nl/cve/CVE-2017-12160","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-09-16T18:48:51.709Z","patch_url":"","primary_source":"","published":"2017-10-26T17:00:00.000Z"},{"affected":"3.4.0","affected_versions_present":true,"cve_id":"CVE-2017-12159","cve_url":"https://cve.blacktree.nl/cve/CVE-2017-12159","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-09-16T21:02:35.248Z","patch_url":"","primary_source":"","published":"2017-10-26T17:00:00.000Z"},{"affected":"3.4.0","affected_versions_present":true,"cve_id":"CVE-2017-12158","cve_url":"https://cve.blacktree.nl/cve/CVE-2017-12158","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-09-16T23:36:41.599Z","patch_url":"","primary_source":"","published":"2017-10-26T17:00:00.000Z"}],"source_generated_at":"2026-10-08T06:18:52.353Z","vendor":"Red Hat, Inc."}}