https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T04:10:42.050861+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-45281 cnvd-2021-45281 2026-10-04T04:10:42.163970+00:00 cnvd-2021-45281 https://cve.radiocsirt.org/vuln/euvd-2026-40064 EUVD-2026-40064 2026-10-04T04:10:42.164019+00:00 EUVD-2026-40064 https://cve.radiocsirt.org/vuln/fkie_cve-2020-10776 fkie_cve-2020-10776 2026-10-04T04:10:42.164034+00:00

A flaw was found in Keycloak before version 12.0.0, where it is possible to add unsafe schemes for the redirect_uri parameter. This flaw allows an attacker to perform a Cross-site scripting attack.

 https://cve.radiocsirt.org/vuln/ghsa-484q-784p-8m5h GHSA-484q-784p-8m5h — Cross-site Scripting in keycloak 2026-10-04T04:10:42.164064+00:00

Affected: Maven: org.keycloak:keycloak-server-spi-private, Maven: org.keycloak:keycloak-services

A flaw was found in Keycloak before version 12.0.0, where it is possible to add unsafe schemes for the redirect_uri parameter. This flaw allows an attacker to perform a Cross-site scripting attack.

 https://cve.radiocsirt.org/vuln/gsd-2020-10776 gsd-2020-10776 2026-10-04T04:10:42.164091+00:00 gsd-2020-10776 https://cve.radiocsirt.org/vuln/rhsa-2020:4929 RHSA-2020:4929 — Red Hat Security Advisory: Red Hat Single Sign-On 7.4.3 security update on RHEL 6 2026-10-04T04:10:42.164104+00:00

keycloak: OIDC redirect_uri allows dangerous schemes resulting in potential XSS keycloak: user can manage resources with just "view-profile" role using new Account Console