Red Hat Security Advisory

RHSA-2025:8672

Red Hat build of Keycloak 26.2.5 Images Security Update

Released 2025-06-09 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat build of Keycloak 26.2 rhbk/keycloak-operator-bundle, rhbk/keycloak-rhel9, rhbk/keycloak-rhel9-operator

TI-2024-31454 CVE-2024-47072 · GHSA-hfq9-hggm-c56q

MEDIUM 43

XStream is a simple library to serialize objects to XML and back again.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02001 Published 2024-11-07 Partial fix · 1.4.21 CWE-121

TI-2025-03075 CVE-2025-3501 · GHSA-hw58-3793-42gg

MEDIUM 42

A flaw was found in Keycloak.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.0047 Published 2025-04-29 Fixed in 26.0.11, 26.2.2 +5 CWE-297