Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
π GNA-1 (CIRCL)
Select from 80 available sources using the dropdown above.
Bitnami VulnDB is not individually searchable yet β the search will cover the sources available on the search page.
| ID | Description | Published | Updated |
|---|---|---|---|
| bit-python-2026-19672 | tarfile extraction filter bypass allows creation of directories outside the destination | 2026-08-25T12:57:48.991Z | 2026-08-25T13:11:39.427Z |
| bit-libpython-2026-19672 | tarfile extraction filter bypass allows creation of directories outside the destination | 2026-08-25T12:53:36.732Z | 2026-08-25T13:11:39.427Z |
| bit-keycloak-2026-17048 | Keycloak-services: keycloak-services: vault-resolved rotated client secrets leaked via admin rest api | 2026-08-25T12:16:47.248Z | 2026-08-25T12:42:31.008Z |
| bit-keycloak-2026-15945 | Keycloak-services: keycloak-services: group hierarchy search discloses hidden parent groups under fgap v2 | 2026-08-25T12:16:36.809Z | 2026-08-25T12:42:31.008Z |
| bit-keycloak-2026-14613 | Keycloak-services: keycloak-services: keycloak: fgap v2 role groups endpoint discloses hidden group metadata without group view permission | 2026-08-25T12:16:30.125Z | 2026-08-25T12:42:31.008Z |
| bit-keycloak-2024-4629 | Keycloak: potential bypass of brute force protection | 2026-08-25T12:16:16.496Z | 2026-08-25T12:42:31.008Z |
| bit-keycloak-2026-9800 | Keycloak-policy-enforcer: keycloak policy enforcer: authorization bypass via incorrect uri comparison | 2026-08-25T11:42:52.486Z | 2026-08-25T12:00:59.918Z |
| bit-keycloak-2026-9799 | Keycloak: keycloak: unauthorized access to resources via uma permission ticket bypass | 2026-08-25T11:42:51.586Z | 2026-08-25T12:00:59.918Z |
| bit-keycloak-2026-9705 | Keycloak: keycloak: attacker can re-enable and take over disabled clients via registration access token | 2026-08-25T11:42:44.567Z | 2026-08-25T12:00:59.918Z |
| bit-keycloak-2026-9099 | Keycloak: group-admin escalation to realm-admin | 2026-08-25T11:42:41.994Z | 2026-08-25T12:00:59.918Z |
| bit-keycloak-2026-9086 | Keycloak: keycloak: cross-site scripting (xss) via case-insensitive uri validation bypass | 2026-08-25T11:42:40.305Z | 2026-08-25T12:00:59.918Z |
| bit-keycloak-2026-9083 | Keycloak: keycloak: information disclosure through arbitrary filesystem path probing | 2026-08-25T11:42:39.471Z | 2026-08-25T12:00:59.918Z |
| bit-keycloak-2026-7571 | Keycloak: keycloak: access token disclosure and implicit flow bypass via forged client data | 2026-08-25T11:42:36.952Z | 2026-08-25T12:00:59.918Z |
| bit-keycloak-2026-7507 | Org.keycloak/keycloak-services: session fixation in oidc login flow that can lead to account takeover | 2026-08-25T11:42:36.076Z | 2026-08-25T12:00:59.918Z |
| bit-keycloak-2026-7504 | Org.keycloak/keycloak-services: open redirect when using wildcard valid redirect uris in keycloak | 2026-08-25T11:42:35.202Z | 2026-08-25T12:00:59.918Z |
| bit-keycloak-2026-7307 | Keycloak: keycloak: denial of service via specially crafted saml input | 2026-08-25T11:42:33.470Z | 2026-08-25T12:00:59.918Z |
| bit-keycloak-2026-4636 | Keycloak: keycloak: uma policy bypass allows authenticated users to gain unauthorized access to victim-owned resources. | 2026-08-25T11:42:31.728Z | 2026-08-25T12:00:59.918Z |
| bit-keycloak-2026-4634 | Keycloak: keycloak: denial of service via excessive processing of openid connect scope parameters | 2026-08-25T11:42:30.857Z | 2026-08-25T12:00:59.918Z |
| bit-keycloak-2026-4630 | Keycloak: keycloak: unauthorized resource access and data modification via insecure direct object reference | 2026-08-25T11:42:29.130Z | 2026-08-25T12:00:59.918Z |
| bit-keycloak-2026-4325 | Keycloak: keycloak: replay of action tokens via improper handling of single-use entries | 2026-08-25T11:42:25.639Z | 2026-08-25T12:00:59.918Z |
| bit-keycloak-2026-4282 | Keycloak: keycloak: privilege escalation via forged authorization codes due to singleuseobjectprovider isolation flaw | 2026-08-25T11:42:24.788Z | 2026-08-25T12:00:59.918Z |
| bit-keycloak-2026-3911 | Org.keycloak.services.resources.admin.userresource: keycloak: information disclosure of disabled user attributes via administrative endpoint | 2026-08-25T11:42:23.921Z | 2026-08-25T12:00:59.918Z |
| bit-keycloak-2026-3872 | Keycloak: keycloak: information disclosure due to redirect_uri validation bypass | 2026-08-25T11:42:23.074Z | 2026-08-25T12:00:59.918Z |
| bit-keycloak-2026-37982 | Keycloak: org.keycloak.authentication: keycloak: unauthorized account takeover via webauthn token replay | 2026-08-25T11:42:22.236Z | 2026-08-25T12:00:59.918Z |
| bit-keycloak-2026-37981 | Keycloak: org.keycloak.authorization: keycloak: information disclosure via broken access control in user lookup endpoint | 2026-08-25T11:42:21.390Z | 2026-08-25T12:00:59.918Z |
| bit-keycloak-2026-37979 | Keycloak: keycloak: information disclosure via oidc token introspection endpoint audience bypass | 2026-08-25T11:42:19.680Z | 2026-08-25T12:00:59.918Z |
| bit-keycloak-2026-37978 | Keycloak: org.keycloak.services: keycloak: information disclosure via evaluate-scopes admin api | 2026-08-25T11:42:18.839Z | 2026-08-25T12:00:59.918Z |
| bit-keycloak-2026-3429 | Org.keycloak.services.resources.account: improper access control leading to mfa deletion and account takeover in keycloak account rest api | 2026-08-25T11:42:17.111Z | 2026-08-25T12:00:59.918Z |
| bit-keycloak-2026-3047 | Org.keycloak.broker.saml: keycloak saml broker: authentication bypass due to disabled saml client completing idp-initiated login | 2026-08-25T11:42:14.552Z | 2026-08-25T12:00:59.918Z |
| bit-keycloak-2026-3009 | Org.keycloak/keycloak-services: improper enforcement of disabled identity provider in identitybrokerservice (authentication bypass) | 2026-08-25T11:42:13.652Z | 2026-08-25T12:00:59.918Z |