org.keycloak:keycloak-services vulnerabilities
CVEs whose affected-version data names the org.keycloak:keycloak-services package (maven). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-2092High· 7.7Keycloak: Unauthorized access via improper validation of encrypted SAML assertions
Keycloak: Unauthorized access via improper validation of encrypted SAML assertions
▾ Twilightkeycloak · org.keycloak:keycloak-servicesEPSS 0.31%via GHSA
CVE-2026-9795High· 7.3Keycloak has privilege escalation via improper scope mapping enforcement
Keycloak has privilege escalation via improper scope mapping enforcement
▾ Twilightkeycloak · org.keycloak:keycloak-servicesEPSS 0.49%via GHSA