maven

org.keycloak:keycloak-ldap-federation

7 Total advisories

7 Vulnerabilities

0 Malware

Dependency scanning

Check whether org.keycloak:keycloak-ldap-federation is in your codebase

Corgea flags malicious and compromised dependencies with reachability analysis, so you fix the packages that actually run in your application instead of working through the whole lockfile.

Explore dependency scanning Explore AI SAST →

Vulnerabilities

MEDIUM 4.9

Maven

CVE-2026-9801

Keycloak Vulnerable to Improper Validation of Specified Quantity in Input

May 28, 2026

MEDIUM 5.5

Maven

CVE-2025-13467

Keycloak LDAP User Federation provider enables admin-triggered untrusted Java deserialization

Dec 19, 2025

MEDIUM 5.5

Maven

GHSA-93vm-mqpw-8wh3

Duplicate Advisory: Keycloak LDAP User Federation provider enables admin-triggered untrusted Java deserialization

Nov 25, 2025

LOW 2.7

Maven

CVE-2024-5967

Keycloak leaks configured LDAP bind credentials through the Keycloak admin console

Jun 21, 2024

MEDIUM 5.4

Maven

GHSA-m3hp-8546-5qmr

Duplicate Advisory: Authentication Bypass Due to Missing LDAP Bind After Password Reset in Keycloak

Jan 22, 2025

MEDIUM 5.4

Maven

CVE-2025-0604

Authentication Bypass Due to Missing LDAP Bind After Password Reset in Keycloak

Mar 10, 2025

UNKNOWN

Maven

CVE-2022-2232

Keycloak vulnerable to LDAP Injection on UsernameForm Login

Nov 29, 2023

Browse more Maven advisories

Learn What is SAST?

Static Application Security Testing finds vulnerabilities like this one in source code before it ships. Read the guide →

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes