https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T20:42:11.552509+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2020-36231 cnvd-2020-36231 2026-10-03T20:42:11.562909+00:00 cnvd-2020-36231 https://cve.radiocsirt.org/vuln/euvd-2026-35583 EUVD-2026-35583 2026-10-03T20:42:11.562954+00:00 EUVD-2026-35583 https://cve.radiocsirt.org/vuln/fkie_cve-2020-1727 fkie_cve-2020-1727 2026-10-03T20:42:11.562968+00:00

A vulnerability was found in Keycloak before 9.0.2, where every Authorization URL that points to an IDP server lacks proper input validation as it allows a wide range of characters. This flaw allows a malicious to craft deep links that introduce further attack scenarios on affected clients.

 https://cve.radiocsirt.org/vuln/ghsa-pw23-237p-qf6r GHSA-pw23-237p-qf6r 2026-10-03T20:42:11.563000+00:00

A vulnerability was found in Keycloak before 9.0.2, where every Authorization URL that points to an IDP server lacks proper input validation as it allows a wide range of characters. This flaw allows a malicious to craft deep links that introduce further attack scenarios on affected clients.

 https://cve.radiocsirt.org/vuln/gsd-2020-1727 gsd-2020-1727 2026-10-03T20:42:11.563017+00:00 gsd-2020-1727 https://cve.radiocsirt.org/vuln/rhsa-2020:2252 RHSA-2020:2252 — Red Hat Security Advisory: Red Hat support for Spring Boot 2.2.6 security and bug fix update 2026-10-03T20:42:11.563027+00:00

keycloak: stored XSS in client settings via application links keycloak: Password leak by logged exception in HttpMethod class keycloak: security issue on reset credential flow keycloak: problem with privacy after user logout keycloak: missing input validation in IDP authorization URLs keycloak: failedLogin Event not sent to BruteForceProtector when using Post Login Flow with Conditional-OTP