| Package | Affected versions | Patched versions |
|---|---|---|
| org.keycloak:keycloak-services | < 26.2.2 | 26.2.2 |
| build of keycloak | ≥ 26.0, < 26.0.11 | 26.0.11 |
A flaw was found in Keycloak. The org.keycloak.authorization package may be vulnerable to circumventing required actions, allowing users to circumvent requirements such as setting up two-factor authentication.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free