https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T23:18:24.278367+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-21031 EUVD-2026-21031 2026-10-08T23:18:24.283680+00:00 EUVD-2026-21031 https://cve.radiocsirt.org/vuln/fkie_cve-2021-3637 fkie_cve-2021-3637 2026-10-08T23:18:24.283713+00:00

A flaw was found in keycloak-model-infinispan in keycloak versions before 14.0.0 where authenticationSessions map in RootAuthenticationSessionEntity grows boundlessly which could lead to a DoS attack.

 https://cve.radiocsirt.org/vuln/ghsa-2vp8-jv5v-6qh6 GHSA-2vp8-jv5v-6qh6 — Allocation of resources without limits or throttling in keycloak-model-infinispan 2026-10-08T23:18:24.283744+00:00

Affected: Maven: org.keycloak:keycloak-model-infinispan

A flaw was found in keycloak-model-infinispan in keycloak versions before 14.0.0 where authenticationSessions map in RootAuthenticationSessionEntity grows boundlessly which could lead to a DoS attack.

 https://cve.radiocsirt.org/vuln/gsd-2021-3637 gsd-2021-3637 2026-10-08T23:18:24.283767+00:00 gsd-2021-3637 https://cve.radiocsirt.org/vuln/rhsa-2021:3527 RHSA-2021:3527 — Red Hat Security Advisory: Red Hat Single Sign-On 7.4.9 security update on RHEL 6 2026-10-08T23:18:24.283779+00:00

jackson-dataformat-cbor: Unchecked allocation of byte buffer can cause a java.lang.OutOfMemoryError exception keycloak: X509 Direct Grant Auth does not verify certificate timestamp validity keycloak: Brute force attack is possible even after the account lockout keycloak: Anyone can register a new device when there is no device registered for passwordless login keycloak-model-infinispan: authenticationSessions map in RootAuthenticationSessionEntity grows boundlessly could lead to a DoS attack