https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T08:43:32.157894+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2020-35678 cnvd-2020-35678 2026-10-03T08:43:32.313636+00:00 cnvd-2020-35678 https://cve.radiocsirt.org/vuln/euvd-2026-35553 EUVD-2026-35553 2026-10-03T08:43:32.313674+00:00 EUVD-2026-35553 https://cve.radiocsirt.org/vuln/fkie_cve-2020-1698 fkie_cve-2020-1698 2026-10-03T08:43:32.313688+00:00

A flaw was found in keycloak in versions before 9.0.0. A logged exception in the HttpMethod class may leak the password given as parameter. The highest threat from this vulnerability is to data confidentiality.

 https://cve.radiocsirt.org/vuln/ghsa-qgmm-f2qw-r95f GHSA-qgmm-f2qw-r95f — Keycloak leaks sensitive information in logged exceptions 2026-10-03T08:43:32.313725+00:00

Affected: Maven: org.keycloak:keycloak-core

A flaw was found in keycloak in versions before 9.0.0. A logged exception in the HttpMethod class may leak the password given as parameter. The highest threat from this vulnerability is to data confidentiality.

 https://cve.radiocsirt.org/vuln/gsd-2020-1698 gsd-2020-1698 2026-10-03T08:43:32.313748+00:00 gsd-2020-1698 https://cve.radiocsirt.org/vuln/rhsa-2020:2252 RHSA-2020:2252 — Red Hat Security Advisory: Red Hat support for Spring Boot 2.2.6 security and bug fix update 2026-10-03T08:43:32.313760+00:00

keycloak: stored XSS in client settings via application links keycloak: Password leak by logged exception in HttpMethod class keycloak: security issue on reset credential flow keycloak: problem with privacy after user logout keycloak: missing input validation in IDP authorization URLs keycloak: failedLogin Event not sent to BruteForceProtector when using Post Login Flow with Conditional-OTP