https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T00:37:13.924822+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2017-03738 cnvd-2017-03738 2026-10-10T00:37:13.928504+00:00 cnvd-2017-03738 https://cve.radiocsirt.org/vuln/euvd-2026-72488 EUVD-2026-72488 2026-10-10T00:37:13.928559+00:00 EUVD-2026-72488 https://cve.radiocsirt.org/vuln/fkie_cve-2017-2646 fkie_cve-2017-2646 2026-10-10T00:37:13.928583+00:00

It was found that when Keycloak before 2.5.5 receives a Logout request with a Extensions in the middle of the request, the SAMLSloRequestParser.parse() method ends in a infinite loop. An attacker could use this flaw to conduct denial of service attacks.

 https://cve.radiocsirt.org/vuln/ghsa-jc6q-27mw-p55w GHSA-jc6q-27mw-p55w — Keycloak vulnerable to infinite loop based Denial of Service 2026-10-10T00:37:13.928626+00:00

Affected: Maven: org.keycloak:keycloak-core

When Keycloak versions prior to 2.5.5 receive a Logout request with an Extensions in the middle of the request, the SAMLSloRequestParser.parse() method ends in an infinite loop. An attacker could use this flaw to conduct denial of service attacks.

 https://cve.radiocsirt.org/vuln/gsd-2017-2646 gsd-2017-2646 2026-10-10T00:37:13.928674+00:00 gsd-2017-2646