| Package | Affected versions | Patched versions |
|---|---|---|
| org.keycloak:keycloak-parent | ≤ 26.5.0 |
A flaw was found in Keycloak. The Keycloak Authorization header parser is overly permissive regarding the formatting of the "Bearer" authentication scheme. It accepts non-standard characters (such as tabs) as separators and tolerates case variations that deviate from RFC 6750 specifications.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free