https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 10:41:55 +0000 https://cve.radiocsirt.org/vuln/cnvd-2021-17783 cnvd-2021-17783 https://cve.radiocsirt.org/vuln/cnvd-2021-17783 https://cve.radiocsirt.org/vuln/euvd-2026-35552 EUVD-2026-35552 https://cve.radiocsirt.org/vuln/euvd-2026-35552 https://cve.radiocsirt.org/vuln/fkie_cve-2020-1694 <p>A flaw was found in all versions of Keycloak before 10.0.0, where the NodeJS adapter did not support the verify-token-audience. This flaw results in some users having access to sensitive information outside of their permissions.</p> <p>A flaw was found in all versions of Keycloak before 10.0.0, where the NodeJS adapter did not support the verify-token-audience. This flaw results in some users having access to sensitive information outside of their permissions.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-1694 https://cve.radiocsirt.org/vuln/ghsa-72j4-94rx-cr6w <p><strong>Affected:</strong> Maven: org.keycloak:keycloak-parent</p> <p>A flaw was found in all versions of Keycloak before 10.0.0, where the NodeJS adapter did not support the verify-token-audience. This flaw results in some users having access to sensitive information outside of their permissions.</p> <p><strong>Affected:</strong> Maven: org.keycloak:keycloak-parent</p> <p>A flaw was found in all versions of Keycloak before 10.0.0, where the NodeJS adapter did not support the verify-token-audience. This flaw results in some users having access to sensitive information outside of their permissions.</p> https://cve.radiocsirt.org/vuln/ghsa-72j4-94rx-cr6w https://cve.radiocsirt.org/vuln/gsd-2020-1694 gsd-2020-1694 https://cve.radiocsirt.org/vuln/gsd-2020-1694 https://cve.radiocsirt.org/vuln/rhsa-2020:2813 <p>keycloak: verify-token-audience support is missing in the NodeJS adapter keycloak: Lack of checks in ObjectInputStream leading to Remote Code Execution jackson-databind: Lacks certain xbean-reflect/JNDI blocking jackson-databind: Serialization gadgets in shaded-hikari-config jackson-databind: Serialization gadgets in ibatis-sqlmap jackson-databind: Serialization gadgets in anteros-core undertow: invalid HTTP request with large chunk size keycloak: top-level navigations to data URLs resulting in XSS are possible (incomplete fix of CVE-2020-1697) jackson-databind: Serialization gadgets in javax.swing.JEditorPane jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method jquery: Untrusted code execution via &lt;option&gt; tag in HTML passed to DOM manipulation methods</p> <p>keycloak: verify-token-audience support is missing in the NodeJS adapter keycloak: Lack of checks in ObjectInputStream leading to Remote Code Execution jackson-databind: Lacks certain xbean-reflect/JNDI blocking jackson-databind: Serialization gadgets in shaded-hikari-config jackson-databind: Serialization gadgets in ibatis-sqlmap jackson-databind: Serialization gadgets in anteros-core undertow: invalid HTTP request with large chunk size keycloak: top-level navigations to data URLs resulting in XSS are possible (incomplete fix of CVE-2020-1697) jackson-databind: Serialization gadgets in javax.swing.JEditorPane jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method jquery: Untrusted code execution via &lt;option&gt; tag in HTML passed to DOM manipulation methods</p> https://cve.radiocsirt.org/vuln/rhsa-2020:2813