https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T10:09:26.946416+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-21128 EUVD-2026-21128 2026-10-03T10:09:26.951561+00:00 EUVD-2026-21128 https://cve.radiocsirt.org/vuln/fkie_cve-2021-3856 fkie_cve-2021-3856 2026-10-03T10:09:26.951602+00:00

ClassLoaderTheme and ClasspathThemeResourceProviderFactory allows reading any file available as a resource to the classloader. By sending requests for theme resources with a relative path from an external HTTP client, the client will receive the content of random files if available.

 https://cve.radiocsirt.org/vuln/ghsa-3w4v-rvc4-2xpw GHSA-3w4v-rvc4-2xpw — Keycloak has Files or Directories Accessible to External Parties 2026-10-03T10:09:26.951638+00:00

Affected: Maven: org.keycloak:keycloak-core

ClassLoaderTheme and ClasspathThemeResourceProviderFactory allows reading any file available as a resource to the classloader. By sending requests for theme resources with a relative path from an external HTTP client, the client will receive the content of random files if available.

 https://cve.radiocsirt.org/vuln/gsd-2021-3856 gsd-2021-3856 2026-10-03T10:09:26.951663+00:00 gsd-2021-3856 https://cve.radiocsirt.org/vuln/rhba-2022:5452 RHBA-2022:5452 — Red Hat Bug Fix Advisory: Red Hat Single Sign-On 7.6.0 update on RHEL 7 2026-10-03T10:09:26.951675+00:00

keycloak-services: ClassLoaderTheme and ClasspathThemeResourceProviderFactory allows reading any file available as a resource to the classloader liquibase: Improper Restriction of XML External Entity