https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 19:52:02 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-12476 EUVD-2026-12476 https://cve.radiocsirt.org/vuln/euvd-2026-12476 https://cve.radiocsirt.org/vuln/fkie_cve-2022-2668 <p>An issue was discovered in Keycloak that allows arbitrary Javascript to be uploaded for the SAML protocol mapper even if the UPLOAD_SCRIPTS feature is disabled</p> <p>An issue was discovered in Keycloak that allows arbitrary Javascript to be uploaded for the SAML protocol mapper even if the UPLOAD_SCRIPTS feature is disabled</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-2668 https://cve.radiocsirt.org/vuln/ghsa-wf7g-7h6h-678v <p><strong>Affected:</strong> Maven: org.keycloak:keycloak-parent</p> <p>An issue was discovered in Keycloak allows arbitrary Javascript to be uploaded for the SAML protocol mapper even if the `UPLOAD_SCRIPTS` feature is disabled</p> <p><strong>Affected:</strong> Maven: org.keycloak:keycloak-parent</p> <p>An issue was discovered in Keycloak allows arbitrary Javascript to be uploaded for the SAML protocol mapper even if the `UPLOAD_SCRIPTS` feature is disabled</p> https://cve.radiocsirt.org/vuln/ghsa-wf7g-7h6h-678v https://cve.radiocsirt.org/vuln/gsd-2022-2668 gsd-2022-2668 https://cve.radiocsirt.org/vuln/gsd-2022-2668 https://cve.radiocsirt.org/vuln/rhsa-2022:6782 <p>jackson-databind: denial of service via a large depth of nested objects h2: Remote Code Execution in Console netty: control chars in header names may lead to HTTP request smuggling xnio: org.xnio.StreamConnection.notifyReadClosed log to debug instead of stderr keycloak: Stored XSS in groups dropdown wildfly: Wildfly management of EJB Session context returns wrong caller principal with Elytron Security enabled keycloak: improper input validation permits script injection keycloak: Uploading of SAML javascript protocol mapper scripts through the admin console</p> <p>jackson-databind: denial of service via a large depth of nested objects h2: Remote Code Execution in Console netty: control chars in header names may lead to HTTP request smuggling xnio: org.xnio.StreamConnection.notifyReadClosed log to debug instead of stderr keycloak: Stored XSS in groups dropdown wildfly: Wildfly management of EJB Session context returns wrong caller principal with Elytron Security enabled keycloak: improper input validation permits script injection keycloak: Uploading of SAML javascript protocol mapper scripts through the admin console</p> https://cve.radiocsirt.org/vuln/rhsa-2022:6782