{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_vex",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright © Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-7307.json"
      }
    ],
    "title": "keycloak: Keycloak: Denial of Service via specially crafted SAML input",
    "tracking": {
      "current_release_date": "2026-06-30T03:41:23+00:00",
      "generator": {
        "date": "2026-06-30T03:41:23+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.0"
        }
      },
      "id": "CVE-2026-7307",
      "initial_release_date": "2026-05-19T10:42:34.560000+00:00",
      "revision_history": [
        {
          "date": "2026-05-19T10:42:34.560000+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-05-19T12:01:05+00:00",
          "number": "2",
          "summary": "Current version"
        },
        {
          "date": "2026-06-30T03:41:23+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat build of Keycloak 26.2",
                "product": {
                  "name": "Red Hat build of Keycloak 26.2",
                  "product_id": "9Base-RHBK-26.2",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:build_keycloak:26.2::el9"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat build of Keycloak 26.4.12",
                "product": {
                  "name": "Red Hat build of Keycloak 26.4.12",
                  "product_id": "Red Hat build of Keycloak 26.4.12",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:build_keycloak:26.4::el9"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat build of Keycloak 26.4",
                "product": {
                  "name": "Red Hat build of Keycloak 26.4",
                  "product_id": "9Base-RHBK-26.4",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:build_keycloak:26.4::el9"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat build of Keycloak 26.2.16",
                "product": {
                  "name": "Red Hat build of Keycloak 26.2.16",
                  "product_id": "Red Hat build of Keycloak 26.2.16",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:build_keycloak:26.2::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat build of Keycloak"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rhbk/keycloak-rhel9@sha256:a9aeb0bc33a3461fe2d407896422719b21b184717956cbcebac0da976a220c1c_arm64",
                "product": {
                  "name": "rhbk/keycloak-rhel9@sha256:a9aeb0bc33a3461fe2d407896422719b21b184717956cbcebac0da976a220c1c_arm64",
                  "product_id": "rhbk/keycloak-rhel9@sha256:a9aeb0bc33a3461fe2d407896422719b21b184717956cbcebac0da976a220c1c_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keycloak-rhel9@sha256:a9aeb0bc33a3461fe2d407896422719b21b184717956cbcebac0da976a220c1c?arch=arm64&repository_url=registry.redhat.io/rhbk/keycloak-rhel9&tag=26.2-21"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rhbk/keycloak-rhel9-operator@sha256:88672078ac0b5a0da5b72c11751fa7b0c1c57679ec0f68cb1fe9ba76932397b5_arm64",
                "product": {
                  "name": "rhbk/keycloak-rhel9-operator@sha256:88672078ac0b5a0da5b72c11751fa7b0c1c57679ec0f68cb1fe9ba76932397b5_arm64",
                  "product_id": "rhbk/keycloak-rhel9-operator@sha256:88672078ac0b5a0da5b72c11751fa7b0c1c57679ec0f68cb1fe9ba76932397b5_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keycloak-rhel9-operator@sha256:88672078ac0b5a0da5b72c11751fa7b0c1c57679ec0f68cb1fe9ba76932397b5?arch=arm64&repository_url=registry.redhat.io/rhbk/keycloak-rhel9-operator&tag=26.2-21"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rhbk/keycloak-rhel9@sha256:554cd90241225b6d64d0e7ada9a8ab50ae2054efdb2f5b2cbdb721475ea296df_arm64",
                "product": {
                  "name": "rhbk/keycloak-rhel9@sha256:554cd90241225b6d64d0e7ada9a8ab50ae2054efdb2f5b2cbdb721475ea296df_arm64",
                  "product_id": "rhbk/keycloak-rhel9@sha256:554cd90241225b6d64d0e7ada9a8ab50ae2054efdb2f5b2cbdb721475ea296df_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keycloak-rhel9@sha256:554cd90241225b6d64d0e7ada9a8ab50ae2054efdb2f5b2cbdb721475ea296df?arch=arm64&repository_url=registry.redhat.io/rhbk/keycloak-rhel9&tag=26.4-17"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rhbk/keycloak-rhel9-operator@sha256:f80c9568ff4b3cc086b7107c8e68db5f548c2b51a01dd8c79d0c9705574a180c_arm64",
                "product": {
                  "name": "rhbk/keycloak-rhel9-operator@sha256:f80c9568ff4b3cc086b7107c8e68db5f548c2b51a01dd8c79d0c9705574a180c_arm64",
                  "product_id": "rhbk/keycloak-rhel9-operator@sha256:f80c9568ff4b3cc086b7107c8e68db5f548c2b51a01dd8c79d0c9705574a180c_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keycloak-rhel9-operator@sha256:f80c9568ff4b3cc086b7107c8e68db5f548c2b51a01dd8c79d0c9705574a180c?arch=arm64&repository_url=registry.redhat.io/rhbk/keycloak-rhel9-operator&tag=26.4-17"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "arm64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rhbk/keycloak-rhel9@sha256:58e692074e695bee04981aff9641db8070ba1a49ee6134fcc008046cd84da21d_ppc64le",
                "product": {
                  "name": "rhbk/keycloak-rhel9@sha256:58e692074e695bee04981aff9641db8070ba1a49ee6134fcc008046cd84da21d_ppc64le",
                  "product_id": "rhbk/keycloak-rhel9@sha256:58e692074e695bee04981aff9641db8070ba1a49ee6134fcc008046cd84da21d_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keycloak-rhel9@sha256:58e692074e695bee04981aff9641db8070ba1a49ee6134fcc008046cd84da21d?arch=ppc64le&repository_url=registry.redhat.io/rhbk/keycloak-rhel9&tag=26.2-21"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rhbk/keycloak-rhel9-operator@sha256:13d8216c9f47a6f73ea6ea5c9ae7b8b38a89c3822e48eeed7271e50970132175_ppc64le",
                "product": {
                  "name": "rhbk/keycloak-rhel9-operator@sha256:13d8216c9f47a6f73ea6ea5c9ae7b8b38a89c3822e48eeed7271e50970132175_ppc64le",
                  "product_id": "rhbk/keycloak-rhel9-operator@sha256:13d8216c9f47a6f73ea6ea5c9ae7b8b38a89c3822e48eeed7271e50970132175_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keycloak-rhel9-operator@sha256:13d8216c9f47a6f73ea6ea5c9ae7b8b38a89c3822e48eeed7271e50970132175?arch=ppc64le&repository_url=registry.redhat.io/rhbk/keycloak-rhel9-operator&tag=26.2-21"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rhbk/keycloak-rhel9@sha256:fa7342d82f080bfe8ffaaf5ba204b98dc435897a388b1501d23a1541fe7f1272_ppc64le",
                "product": {
                  "name": "rhbk/keycloak-rhel9@sha256:fa7342d82f080bfe8ffaaf5ba204b98dc435897a388b1501d23a1541fe7f1272_ppc64le",
                  "product_id": "rhbk/keycloak-rhel9@sha256:fa7342d82f080bfe8ffaaf5ba204b98dc435897a388b1501d23a1541fe7f1272_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keycloak-rhel9@sha256:fa7342d82f080bfe8ffaaf5ba204b98dc435897a388b1501d23a1541fe7f1272?arch=ppc64le&repository_url=registry.redhat.io/rhbk/keycloak-rhel9&tag=26.4-17"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rhbk/keycloak-rhel9-operator@sha256:d8185614aa82117680351c710a5d7b80703a9d450dd02a7becfd1405cbc5ecd5_ppc64le",
                "product": {
                  "name": "rhbk/keycloak-rhel9-operator@sha256:d8185614aa82117680351c710a5d7b80703a9d450dd02a7becfd1405cbc5ecd5_ppc64le",
                  "product_id": "rhbk/keycloak-rhel9-operator@sha256:d8185614aa82117680351c710a5d7b80703a9d450dd02a7becfd1405cbc5ecd5_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keycloak-rhel9-operator@sha256:d8185614aa82117680351c710a5d7b80703a9d450dd02a7becfd1405cbc5ecd5?arch=ppc64le&repository_url=registry.redhat.io/rhbk/keycloak-rhel9-operator&tag=26.4-17"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rhbk/keycloak-rhel9@sha256:7861ca2441bed95aab1ad43f9159d5c60b522fe3f43833f1847bd1d3ddef94d3_amd64",
                "product": {
                  "name": "rhbk/keycloak-rhel9@sha256:7861ca2441bed95aab1ad43f9159d5c60b522fe3f43833f1847bd1d3ddef94d3_amd64",
                  "product_id": "rhbk/keycloak-rhel9@sha256:7861ca2441bed95aab1ad43f9159d5c60b522fe3f43833f1847bd1d3ddef94d3_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keycloak-rhel9@sha256:7861ca2441bed95aab1ad43f9159d5c60b522fe3f43833f1847bd1d3ddef94d3?arch=amd64&repository_url=registry.redhat.io/rhbk/keycloak-rhel9&tag=26.2-21"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rhbk/keycloak-operator-bundle@sha256:43a89aece29c0a33128e5a7be4ef26d96956fa125df89e22b183c40e50bb8a1d_amd64",
                "product": {
                  "name": "rhbk/keycloak-operator-bundle@sha256:43a89aece29c0a33128e5a7be4ef26d96956fa125df89e22b183c40e50bb8a1d_amd64",
                  "product_id": "rhbk/keycloak-operator-bundle@sha256:43a89aece29c0a33128e5a7be4ef26d96956fa125df89e22b183c40e50bb8a1d_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keycloak-operator-bundle@sha256:43a89aece29c0a33128e5a7be4ef26d96956fa125df89e22b183c40e50bb8a1d?arch=amd64&repository_url=registry.redhat.io/rhbk/keycloak-operator-bundle&tag=26.2.16-1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rhbk/keycloak-rhel9-operator@sha256:4d2cc26a505eda68f7270c8e8a02d794588f9c7ceec98b763d83e3875f957132_amd64",
                "product": {
                  "name": "rhbk/keycloak-rhel9-operator@sha256:4d2cc26a505eda68f7270c8e8a02d794588f9c7ceec98b763d83e3875f957132_amd64",
                  "product_id": "rhbk/keycloak-rhel9-operator@sha256:4d2cc26a505eda68f7270c8e8a02d794588f9c7ceec98b763d83e3875f957132_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keycloak-rhel9-operator@sha256:4d2cc26a505eda68f7270c8e8a02d794588f9c7ceec98b763d83e3875f957132?arch=amd64&repository_url=registry.redhat.io/rhbk/keycloak-rhel9-operator&tag=26.2-21"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rhbk/keycloak-rhel9@sha256:81773a34d38a8df4b07344fe4ba5670d18684b3579c9d2cf8d0690bf5ec5ab40_amd64",
                "product": {
                  "name": "rhbk/keycloak-rhel9@sha256:81773a34d38a8df4b07344fe4ba5670d18684b3579c9d2cf8d0690bf5ec5ab40_amd64",
                  "product_id": "rhbk/keycloak-rhel9@sha256:81773a34d38a8df4b07344fe4ba5670d18684b3579c9d2cf8d0690bf5ec5ab40_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keycloak-rhel9@sha256:81773a34d38a8df4b07344fe4ba5670d18684b3579c9d2cf8d0690bf5ec5ab40?arch=amd64&repository_url=registry.redhat.io/rhbk/keycloak-rhel9&tag=26.4-17"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rhbk/keycloak-operator-bundle@sha256:15286c44c4003e787b0bdf9a0bbc5083a2f2312eaf29ccd0c6943232ff52d729_amd64",
                "product": {
                  "name": "rhbk/keycloak-operator-bundle@sha256:15286c44c4003e787b0bdf9a0bbc5083a2f2312eaf29ccd0c6943232ff52d729_amd64",
                  "product_id": "rhbk/keycloak-operator-bundle@sha256:15286c44c4003e787b0bdf9a0bbc5083a2f2312eaf29ccd0c6943232ff52d729_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keycloak-operator-bundle@sha256:15286c44c4003e787b0bdf9a0bbc5083a2f2312eaf29ccd0c6943232ff52d729?arch=amd64&repository_url=registry.redhat.io/rhbk/keycloak-operator-bundle&tag=26.4.12-1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rhbk/keycloak-rhel9-operator@sha256:2a81955051fb0975bfcb77d25ed64c84038d3c7293f910aeb88f9241be531f9d_amd64",
                "product": {
                  "name": "rhbk/keycloak-rhel9-operator@sha256:2a81955051fb0975bfcb77d25ed64c84038d3c7293f910aeb88f9241be531f9d_amd64",
                  "product_id": "rhbk/keycloak-rhel9-operator@sha256:2a81955051fb0975bfcb77d25ed64c84038d3c7293f910aeb88f9241be531f9d_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keycloak-rhel9-operator@sha256:2a81955051fb0975bfcb77d25ed64c84038d3c7293f910aeb88f9241be531f9d?arch=amd64&repository_url=registry.redhat.io/rhbk/keycloak-rhel9-operator&tag=26.4-17"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rhbk/keycloak-rhel9@sha256:01a56463ad6790cf448e66f59a81c229db4159f42e563a13d19de051ec85ca86_s390x",
                "product": {
                  "name": "rhbk/keycloak-rhel9@sha256:01a56463ad6790cf448e66f59a81c229db4159f42e563a13d19de051ec85ca86_s390x",
                  "product_id": "rhbk/keycloak-rhel9@sha256:01a56463ad6790cf448e66f59a81c229db4159f42e563a13d19de051ec85ca86_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keycloak-rhel9@sha256:01a56463ad6790cf448e66f59a81c229db4159f42e563a13d19de051ec85ca86?arch=s390x&repository_url=registry.redhat.io/rhbk/keycloak-rhel9&tag=26.2-21"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rhbk/keycloak-rhel9-operator@sha256:fa9cebe14d003ae002137462fc5833e5634fd040d8f25a66230da9a753891914_s390x",
                "product": {
                  "name": "rhbk/keycloak-rhel9-operator@sha256:fa9cebe14d003ae002137462fc5833e5634fd040d8f25a66230da9a753891914_s390x",
                  "product_id": "rhbk/keycloak-rhel9-operator@sha256:fa9cebe14d003ae002137462fc5833e5634fd040d8f25a66230da9a753891914_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keycloak-rhel9-operator@sha256:fa9cebe14d003ae002137462fc5833e5634fd040d8f25a66230da9a753891914?arch=s390x&repository_url=registry.redhat.io/rhbk/keycloak-rhel9-operator&tag=26.2-21"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rhbk/keycloak-rhel9@sha256:68b61a98fcdfd46a166cabe097d609d65fd51181860f9ec7f691bbe5d2a986db_s390x",
                "product": {
                  "name": "rhbk/keycloak-rhel9@sha256:68b61a98fcdfd46a166cabe097d609d65fd51181860f9ec7f691bbe5d2a986db_s390x",
                  "product_id": "rhbk/keycloak-rhel9@sha256:68b61a98fcdfd46a166cabe097d609d65fd51181860f9ec7f691bbe5d2a986db_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keycloak-rhel9@sha256:68b61a98fcdfd46a166cabe097d609d65fd51181860f9ec7f691bbe5d2a986db?arch=s390x&repository_url=registry.redhat.io/rhbk/keycloak-rhel9&tag=26.4-17"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rhbk/keycloak-rhel9-operator@sha256:d915c75947df63aed99031401dbf570181dba3c5a484eb88438a27892eb7aa72_s390x",
                "product": {
                  "name": "rhbk/keycloak-rhel9-operator@sha256:d915c75947df63aed99031401dbf570181dba3c5a484eb88438a27892eb7aa72_s390x",
                  "product_id": "rhbk/keycloak-rhel9-operator@sha256:d915c75947df63aed99031401dbf570181dba3c5a484eb88438a27892eb7aa72_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keycloak-rhel9-operator@sha256:d915c75947df63aed99031401dbf570181dba3c5a484eb88438a27892eb7aa72?arch=s390x&repository_url=registry.redhat.io/rhbk/keycloak-rhel9-operator&tag=26.4-17"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhbk/keycloak-operator-bundle@sha256:43a89aece29c0a33128e5a7be4ef26d96956fa125df89e22b183c40e50bb8a1d_amd64 as a component of Red Hat build of Keycloak 26.2",
          "product_id": "9Base-RHBK-26.2:rhbk/keycloak-operator-bundle@sha256:43a89aece29c0a33128e5a7be4ef26d96956fa125df89e22b183c40e50bb8a1d_amd64"
        },
        "product_reference": "rhbk/keycloak-operator-bundle@sha256:43a89aece29c0a33128e5a7be4ef26d96956fa125df89e22b183c40e50bb8a1d_amd64",
        "relates_to_product_reference": "9Base-RHBK-26.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhbk/keycloak-rhel9-operator@sha256:13d8216c9f47a6f73ea6ea5c9ae7b8b38a89c3822e48eeed7271e50970132175_ppc64le as a component of Red Hat build of Keycloak 26.2",
          "product_id": "9Base-RHBK-26.2:rhbk/keycloak-rhel9-operator@sha256:13d8216c9f47a6f73ea6ea5c9ae7b8b38a89c3822e48eeed7271e50970132175_ppc64le"
        },
        "product_reference": "rhbk/keycloak-rhel9-operator@sha256:13d8216c9f47a6f73ea6ea5c9ae7b8b38a89c3822e48eeed7271e50970132175_ppc64le",
        "relates_to_product_reference": "9Base-RHBK-26.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhbk/keycloak-rhel9-operator@sha256:4d2cc26a505eda68f7270c8e8a02d794588f9c7ceec98b763d83e3875f957132_amd64 as a component of Red Hat build of Keycloak 26.2",
          "product_id": "9Base-RHBK-26.2:rhbk/keycloak-rhel9-operator@sha256:4d2cc26a505eda68f7270c8e8a02d794588f9c7ceec98b763d83e3875f957132_amd64"
        },
        "product_reference": "rhbk/keycloak-rhel9-operator@sha256:4d2cc26a505eda68f7270c8e8a02d794588f9c7ceec98b763d83e3875f957132_amd64",
        "relates_to_product_reference": "9Base-RHBK-26.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhbk/keycloak-rhel9-operator@sha256:88672078ac0b5a0da5b72c11751fa7b0c1c57679ec0f68cb1fe9ba76932397b5_arm64 as a component of Red Hat build of Keycloak 26.2",
          "product_id": "9Base-RHBK-26.2:rhbk/keycloak-rhel9-operator@sha256:88672078ac0b5a0da5b72c11751fa7b0c1c57679ec0f68cb1fe9ba76932397b5_arm64"
        },
        "product_reference": "rhbk/keycloak-rhel9-operator@sha256:88672078ac0b5a0da5b72c11751fa7b0c1c57679ec0f68cb1fe9ba76932397b5_arm64",
        "relates_to_product_reference": "9Base-RHBK-26.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhbk/keycloak-rhel9-operator@sha256:fa9cebe14d003ae002137462fc5833e5634fd040d8f25a66230da9a753891914_s390x as a component of Red Hat build of Keycloak 26.2",
          "product_id": "9Base-RHBK-26.2:rhbk/keycloak-rhel9-operator@sha256:fa9cebe14d003ae002137462fc5833e5634fd040d8f25a66230da9a753891914_s390x"
        },
        "product_reference": "rhbk/keycloak-rhel9-operator@sha256:fa9cebe14d003ae002137462fc5833e5634fd040d8f25a66230da9a753891914_s390x",
        "relates_to_product_reference": "9Base-RHBK-26.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhbk/keycloak-rhel9@sha256:01a56463ad6790cf448e66f59a81c229db4159f42e563a13d19de051ec85ca86_s390x as a component of Red Hat build of Keycloak 26.2",
          "product_id": "9Base-RHBK-26.2:rhbk/keycloak-rhel9@sha256:01a56463ad6790cf448e66f59a81c229db4159f42e563a13d19de051ec85ca86_s390x"
        },
        "product_reference": "rhbk/keycloak-rhel9@sha256:01a56463ad6790cf448e66f59a81c229db4159f42e563a13d19de051ec85ca86_s390x",
        "relates_to_product_reference": "9Base-RHBK-26.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhbk/keycloak-rhel9@sha256:58e692074e695bee04981aff9641db8070ba1a49ee6134fcc008046cd84da21d_ppc64le as a component of Red Hat build of Keycloak 26.2",
          "product_id": "9Base-RHBK-26.2:rhbk/keycloak-rhel9@sha256:58e692074e695bee04981aff9641db8070ba1a49ee6134fcc008046cd84da21d_ppc64le"
        },
        "product_reference": "rhbk/keycloak-rhel9@sha256:58e692074e695bee04981aff9641db8070ba1a49ee6134fcc008046cd84da21d_ppc64le",
        "relates_to_product_reference": "9Base-RHBK-26.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhbk/keycloak-rhel9@sha256:7861ca2441bed95aab1ad43f9159d5c60b522fe3f43833f1847bd1d3ddef94d3_amd64 as a component of Red Hat build of Keycloak 26.2",
          "product_id": "9Base-RHBK-26.2:rhbk/keycloak-rhel9@sha256:7861ca2441bed95aab1ad43f9159d5c60b522fe3f43833f1847bd1d3ddef94d3_amd64"
        },
        "product_reference": "rhbk/keycloak-rhel9@sha256:7861ca2441bed95aab1ad43f9159d5c60b522fe3f43833f1847bd1d3ddef94d3_amd64",
        "relates_to_product_reference": "9Base-RHBK-26.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhbk/keycloak-rhel9@sha256:a9aeb0bc33a3461fe2d407896422719b21b184717956cbcebac0da976a220c1c_arm64 as a component of Red Hat build of Keycloak 26.2",
          "product_id": "9Base-RHBK-26.2:rhbk/keycloak-rhel9@sha256:a9aeb0bc33a3461fe2d407896422719b21b184717956cbcebac0da976a220c1c_arm64"
        },
        "product_reference": "rhbk/keycloak-rhel9@sha256:a9aeb0bc33a3461fe2d407896422719b21b184717956cbcebac0da976a220c1c_arm64",
        "relates_to_product_reference": "9Base-RHBK-26.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhbk/keycloak-operator-bundle@sha256:15286c44c4003e787b0bdf9a0bbc5083a2f2312eaf29ccd0c6943232ff52d729_amd64 as a component of Red Hat build of Keycloak 26.4",
          "product_id": "9Base-RHBK-26.4:rhbk/keycloak-operator-bundle@sha256:15286c44c4003e787b0bdf9a0bbc5083a2f2312eaf29ccd0c6943232ff52d729_amd64"
        },
        "product_reference": "rhbk/keycloak-operator-bundle@sha256:15286c44c4003e787b0bdf9a0bbc5083a2f2312eaf29ccd0c6943232ff52d729_amd64",
        "relates_to_product_reference": "9Base-RHBK-26.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhbk/keycloak-rhel9-operator@sha256:2a81955051fb0975bfcb77d25ed64c84038d3c7293f910aeb88f9241be531f9d_amd64 as a component of Red Hat build of Keycloak 26.4",
          "product_id": "9Base-RHBK-26.4:rhbk/keycloak-rhel9-operator@sha256:2a81955051fb0975bfcb77d25ed64c84038d3c7293f910aeb88f9241be531f9d_amd64"
        },
        "product_reference": "rhbk/keycloak-rhel9-operator@sha256:2a81955051fb0975bfcb77d25ed64c84038d3c7293f910aeb88f9241be531f9d_amd64",
        "relates_to_product_reference": "9Base-RHBK-26.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhbk/keycloak-rhel9-operator@sha256:d8185614aa82117680351c710a5d7b80703a9d450dd02a7becfd1405cbc5ecd5_ppc64le as a component of Red Hat build of Keycloak 26.4",
          "product_id": "9Base-RHBK-26.4:rhbk/keycloak-rhel9-operator@sha256:d8185614aa82117680351c710a5d7b80703a9d450dd02a7becfd1405cbc5ecd5_ppc64le"
        },
        "product_reference": "rhbk/keycloak-rhel9-operator@sha256:d8185614aa82117680351c710a5d7b80703a9d450dd02a7becfd1405cbc5ecd5_ppc64le",
        "relates_to_product_reference": "9Base-RHBK-26.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhbk/keycloak-rhel9-operator@sha256:d915c75947df63aed99031401dbf570181dba3c5a484eb88438a27892eb7aa72_s390x as a component of Red Hat build of Keycloak 26.4",
          "product_id": "9Base-RHBK-26.4:rhbk/keycloak-rhel9-operator@sha256:d915c75947df63aed99031401dbf570181dba3c5a484eb88438a27892eb7aa72_s390x"
        },
        "product_reference": "rhbk/keycloak-rhel9-operator@sha256:d915c75947df63aed99031401dbf570181dba3c5a484eb88438a27892eb7aa72_s390x",
        "relates_to_product_reference": "9Base-RHBK-26.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhbk/keycloak-rhel9-operator@sha256:f80c9568ff4b3cc086b7107c8e68db5f548c2b51a01dd8c79d0c9705574a180c_arm64 as a component of Red Hat build of Keycloak 26.4",
          "product_id": "9Base-RHBK-26.4:rhbk/keycloak-rhel9-operator@sha256:f80c9568ff4b3cc086b7107c8e68db5f548c2b51a01dd8c79d0c9705574a180c_arm64"
        },
        "product_reference": "rhbk/keycloak-rhel9-operator@sha256:f80c9568ff4b3cc086b7107c8e68db5f548c2b51a01dd8c79d0c9705574a180c_arm64",
        "relates_to_product_reference": "9Base-RHBK-26.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhbk/keycloak-rhel9@sha256:554cd90241225b6d64d0e7ada9a8ab50ae2054efdb2f5b2cbdb721475ea296df_arm64 as a component of Red Hat build of Keycloak 26.4",
          "product_id": "9Base-RHBK-26.4:rhbk/keycloak-rhel9@sha256:554cd90241225b6d64d0e7ada9a8ab50ae2054efdb2f5b2cbdb721475ea296df_arm64"
        },
        "product_reference": "rhbk/keycloak-rhel9@sha256:554cd90241225b6d64d0e7ada9a8ab50ae2054efdb2f5b2cbdb721475ea296df_arm64",
        "relates_to_product_reference": "9Base-RHBK-26.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhbk/keycloak-rhel9@sha256:68b61a98fcdfd46a166cabe097d609d65fd51181860f9ec7f691bbe5d2a986db_s390x as a component of Red Hat build of Keycloak 26.4",
          "product_id": "9Base-RHBK-26.4:rhbk/keycloak-rhel9@sha256:68b61a98fcdfd46a166cabe097d609d65fd51181860f9ec7f691bbe5d2a986db_s390x"
        },
        "product_reference": "rhbk/keycloak-rhel9@sha256:68b61a98fcdfd46a166cabe097d609d65fd51181860f9ec7f691bbe5d2a986db_s390x",
        "relates_to_product_reference": "9Base-RHBK-26.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhbk/keycloak-rhel9@sha256:81773a34d38a8df4b07344fe4ba5670d18684b3579c9d2cf8d0690bf5ec5ab40_amd64 as a component of Red Hat build of Keycloak 26.4",
          "product_id": "9Base-RHBK-26.4:rhbk/keycloak-rhel9@sha256:81773a34d38a8df4b07344fe4ba5670d18684b3579c9d2cf8d0690bf5ec5ab40_amd64"
        },
        "product_reference": "rhbk/keycloak-rhel9@sha256:81773a34d38a8df4b07344fe4ba5670d18684b3579c9d2cf8d0690bf5ec5ab40_amd64",
        "relates_to_product_reference": "9Base-RHBK-26.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhbk/keycloak-rhel9@sha256:fa7342d82f080bfe8ffaaf5ba204b98dc435897a388b1501d23a1541fe7f1272_ppc64le as a component of Red Hat build of Keycloak 26.4",
          "product_id": "9Base-RHBK-26.4:rhbk/keycloak-rhel9@sha256:fa7342d82f080bfe8ffaaf5ba204b98dc435897a388b1501d23a1541fe7f1272_ppc64le"
        },
        "product_reference": "rhbk/keycloak-rhel9@sha256:fa7342d82f080bfe8ffaaf5ba204b98dc435897a388b1501d23a1541fe7f1272_ppc64le",
        "relates_to_product_reference": "9Base-RHBK-26.4"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "Anchels"
          ]
        }
      ],
      "cve": "CVE-2026-7307",
      "cwe": {
        "id": "CWE-1286",
        "name": "Improper Validation of Syntactic Correctness of Input"
      },
      "discovery_date": "2026-05-12T16:20:11.587000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2476526"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Keycloak. A remote, unauthenticated attacker can send a specially crafted XML input to the Security Assertion Markup Language (SAML) endpoint. This malicious input can cause high CPU usage and worker thread starvation, leading to a Denial of Service (DoS) where the server becomes unavailable.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "keycloak: Keycloak: Denial of Service via specially crafted SAML input",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is a High severity denial of service vulnerability in Keycloak. An unauthenticated attacker with network access can send specially crafted XML input to the SAML endpoint, causing high CPU utilization and worker thread exhaustion, which renders the Keycloak server unavailable. This directly impacts the availability of Keycloak instances where the SAML protocol is enabled.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-RHBK-26.2:rhbk/keycloak-operator-bundle@sha256:43a89aece29c0a33128e5a7be4ef26d96956fa125df89e22b183c40e50bb8a1d_amd64",
          "9Base-RHBK-26.2:rhbk/keycloak-rhel9-operator@sha256:13d8216c9f47a6f73ea6ea5c9ae7b8b38a89c3822e48eeed7271e50970132175_ppc64le",
          "9Base-RHBK-26.2:rhbk/keycloak-rhel9-operator@sha256:4d2cc26a505eda68f7270c8e8a02d794588f9c7ceec98b763d83e3875f957132_amd64",
          "9Base-RHBK-26.2:rhbk/keycloak-rhel9-operator@sha256:88672078ac0b5a0da5b72c11751fa7b0c1c57679ec0f68cb1fe9ba76932397b5_arm64",
          "9Base-RHBK-26.2:rhbk/keycloak-rhel9-operator@sha256:fa9cebe14d003ae002137462fc5833e5634fd040d8f25a66230da9a753891914_s390x",
          "9Base-RHBK-26.2:rhbk/keycloak-rhel9@sha256:01a56463ad6790cf448e66f59a81c229db4159f42e563a13d19de051ec85ca86_s390x",
          "9Base-RHBK-26.2:rhbk/keycloak-rhel9@sha256:58e692074e695bee04981aff9641db8070ba1a49ee6134fcc008046cd84da21d_ppc64le",
          "9Base-RHBK-26.2:rhbk/keycloak-rhel9@sha256:7861ca2441bed95aab1ad43f9159d5c60b522fe3f43833f1847bd1d3ddef94d3_amd64",
          "9Base-RHBK-26.2:rhbk/keycloak-rhel9@sha256:a9aeb0bc33a3461fe2d407896422719b21b184717956cbcebac0da976a220c1c_arm64",
          "9Base-RHBK-26.4:rhbk/keycloak-operator-bundle@sha256:15286c44c4003e787b0bdf9a0bbc5083a2f2312eaf29ccd0c6943232ff52d729_amd64",
          "9Base-RHBK-26.4:rhbk/keycloak-rhel9-operator@sha256:2a81955051fb0975bfcb77d25ed64c84038d3c7293f910aeb88f9241be531f9d_amd64",
          "9Base-RHBK-26.4:rhbk/keycloak-rhel9-operator@sha256:d8185614aa82117680351c710a5d7b80703a9d450dd02a7becfd1405cbc5ecd5_ppc64le",
          "9Base-RHBK-26.4:rhbk/keycloak-rhel9-operator@sha256:d915c75947df63aed99031401dbf570181dba3c5a484eb88438a27892eb7aa72_s390x",
          "9Base-RHBK-26.4:rhbk/keycloak-rhel9-operator@sha256:f80c9568ff4b3cc086b7107c8e68db5f548c2b51a01dd8c79d0c9705574a180c_arm64",
          "9Base-RHBK-26.4:rhbk/keycloak-rhel9@sha256:554cd90241225b6d64d0e7ada9a8ab50ae2054efdb2f5b2cbdb721475ea296df_arm64",
          "9Base-RHBK-26.4:rhbk/keycloak-rhel9@sha256:68b61a98fcdfd46a166cabe097d609d65fd51181860f9ec7f691bbe5d2a986db_s390x",
          "9Base-RHBK-26.4:rhbk/keycloak-rhel9@sha256:81773a34d38a8df4b07344fe4ba5670d18684b3579c9d2cf8d0690bf5ec5ab40_amd64",
          "9Base-RHBK-26.4:rhbk/keycloak-rhel9@sha256:fa7342d82f080bfe8ffaaf5ba204b98dc435897a388b1501d23a1541fe7f1272_ppc64le",
          "Red Hat build of Keycloak 26.2.16",
          "Red Hat build of Keycloak 26.4.12"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-7307"
        },
        {
          "category": "external",
          "summary": "RHBZ#2476526",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2476526"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-7307",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-7307"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-7307",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-7307"
        }
      ],
      "release_date": "2026-05-19T10:42:34.560000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-05-20T11:23:01+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.",
          "product_ids": [
            "9Base-RHBK-26.2:rhbk/keycloak-operator-bundle@sha256:43a89aece29c0a33128e5a7be4ef26d96956fa125df89e22b183c40e50bb8a1d_amd64",
            "9Base-RHBK-26.2:rhbk/keycloak-rhel9-operator@sha256:13d8216c9f47a6f73ea6ea5c9ae7b8b38a89c3822e48eeed7271e50970132175_ppc64le",
            "9Base-RHBK-26.2:rhbk/keycloak-rhel9-operator@sha256:4d2cc26a505eda68f7270c8e8a02d794588f9c7ceec98b763d83e3875f957132_amd64",
            "9Base-RHBK-26.2:rhbk/keycloak-rhel9-operator@sha256:88672078ac0b5a0da5b72c11751fa7b0c1c57679ec0f68cb1fe9ba76932397b5_arm64",
            "9Base-RHBK-26.2:rhbk/keycloak-rhel9-operator@sha256:fa9cebe14d003ae002137462fc5833e5634fd040d8f25a66230da9a753891914_s390x",
            "9Base-RHBK-26.2:rhbk/keycloak-rhel9@sha256:01a56463ad6790cf448e66f59a81c229db4159f42e563a13d19de051ec85ca86_s390x",
            "9Base-RHBK-26.2:rhbk/keycloak-rhel9@sha256:58e692074e695bee04981aff9641db8070ba1a49ee6134fcc008046cd84da21d_ppc64le",
            "9Base-RHBK-26.2:rhbk/keycloak-rhel9@sha256:7861ca2441bed95aab1ad43f9159d5c60b522fe3f43833f1847bd1d3ddef94d3_amd64",
            "9Base-RHBK-26.2:rhbk/keycloak-rhel9@sha256:a9aeb0bc33a3461fe2d407896422719b21b184717956cbcebac0da976a220c1c_arm64"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:19595"
        },
        {
          "category": "vendor_fix",
          "date": "2026-05-20T11:23:59+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.",
          "product_ids": [
            "9Base-RHBK-26.4:rhbk/keycloak-operator-bundle@sha256:15286c44c4003e787b0bdf9a0bbc5083a2f2312eaf29ccd0c6943232ff52d729_amd64",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9-operator@sha256:2a81955051fb0975bfcb77d25ed64c84038d3c7293f910aeb88f9241be531f9d_amd64",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9-operator@sha256:d8185614aa82117680351c710a5d7b80703a9d450dd02a7becfd1405cbc5ecd5_ppc64le",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9-operator@sha256:d915c75947df63aed99031401dbf570181dba3c5a484eb88438a27892eb7aa72_s390x",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9-operator@sha256:f80c9568ff4b3cc086b7107c8e68db5f548c2b51a01dd8c79d0c9705574a180c_arm64",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9@sha256:554cd90241225b6d64d0e7ada9a8ab50ae2054efdb2f5b2cbdb721475ea296df_arm64",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9@sha256:68b61a98fcdfd46a166cabe097d609d65fd51181860f9ec7f691bbe5d2a986db_s390x",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9@sha256:81773a34d38a8df4b07344fe4ba5670d18684b3579c9d2cf8d0690bf5ec5ab40_amd64",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9@sha256:fa7342d82f080bfe8ffaaf5ba204b98dc435897a388b1501d23a1541fe7f1272_ppc64le"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:19597"
        },
        {
          "category": "vendor_fix",
          "date": "2026-05-20T11:23:33+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.",
          "product_ids": [
            "Red Hat build of Keycloak 26.2.16"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:19594"
        },
        {
          "category": "vendor_fix",
          "date": "2026-05-20T11:23:18+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.",
          "product_ids": [
            "Red Hat build of Keycloak 26.4.12"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:19596"
        },
        {
          "category": "workaround",
          "details": "To mitigate this vulnerability, restrict network access to the Keycloak SAML endpoint to trusted networks and clients. Implement firewall rules to limit inbound connections to the Keycloak service port (e.g., 8080) from untrusted sources. If the SAML protocol is not required for your deployment, consider disabling it to eliminate the attack surface. Applying these network restrictions or configuration changes may necessitate a restart or reload of the Keycloak service, which could temporarily affect its availability.",
          "product_ids": [
            "9Base-RHBK-26.2:rhbk/keycloak-operator-bundle@sha256:43a89aece29c0a33128e5a7be4ef26d96956fa125df89e22b183c40e50bb8a1d_amd64",
            "9Base-RHBK-26.2:rhbk/keycloak-rhel9-operator@sha256:13d8216c9f47a6f73ea6ea5c9ae7b8b38a89c3822e48eeed7271e50970132175_ppc64le",
            "9Base-RHBK-26.2:rhbk/keycloak-rhel9-operator@sha256:4d2cc26a505eda68f7270c8e8a02d794588f9c7ceec98b763d83e3875f957132_amd64",
            "9Base-RHBK-26.2:rhbk/keycloak-rhel9-operator@sha256:88672078ac0b5a0da5b72c11751fa7b0c1c57679ec0f68cb1fe9ba76932397b5_arm64",
            "9Base-RHBK-26.2:rhbk/keycloak-rhel9-operator@sha256:fa9cebe14d003ae002137462fc5833e5634fd040d8f25a66230da9a753891914_s390x",
            "9Base-RHBK-26.2:rhbk/keycloak-rhel9@sha256:01a56463ad6790cf448e66f59a81c229db4159f42e563a13d19de051ec85ca86_s390x",
            "9Base-RHBK-26.2:rhbk/keycloak-rhel9@sha256:58e692074e695bee04981aff9641db8070ba1a49ee6134fcc008046cd84da21d_ppc64le",
            "9Base-RHBK-26.2:rhbk/keycloak-rhel9@sha256:7861ca2441bed95aab1ad43f9159d5c60b522fe3f43833f1847bd1d3ddef94d3_amd64",
            "9Base-RHBK-26.2:rhbk/keycloak-rhel9@sha256:a9aeb0bc33a3461fe2d407896422719b21b184717956cbcebac0da976a220c1c_arm64",
            "9Base-RHBK-26.4:rhbk/keycloak-operator-bundle@sha256:15286c44c4003e787b0bdf9a0bbc5083a2f2312eaf29ccd0c6943232ff52d729_amd64",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9-operator@sha256:2a81955051fb0975bfcb77d25ed64c84038d3c7293f910aeb88f9241be531f9d_amd64",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9-operator@sha256:d8185614aa82117680351c710a5d7b80703a9d450dd02a7becfd1405cbc5ecd5_ppc64le",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9-operator@sha256:d915c75947df63aed99031401dbf570181dba3c5a484eb88438a27892eb7aa72_s390x",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9-operator@sha256:f80c9568ff4b3cc086b7107c8e68db5f548c2b51a01dd8c79d0c9705574a180c_arm64",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9@sha256:554cd90241225b6d64d0e7ada9a8ab50ae2054efdb2f5b2cbdb721475ea296df_arm64",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9@sha256:68b61a98fcdfd46a166cabe097d609d65fd51181860f9ec7f691bbe5d2a986db_s390x",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9@sha256:81773a34d38a8df4b07344fe4ba5670d18684b3579c9d2cf8d0690bf5ec5ab40_amd64",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9@sha256:fa7342d82f080bfe8ffaaf5ba204b98dc435897a388b1501d23a1541fe7f1272_ppc64le",
            "Red Hat build of Keycloak 26.2.16",
            "Red Hat build of Keycloak 26.4.12"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-RHBK-26.2:rhbk/keycloak-operator-bundle@sha256:43a89aece29c0a33128e5a7be4ef26d96956fa125df89e22b183c40e50bb8a1d_amd64",
            "9Base-RHBK-26.2:rhbk/keycloak-rhel9-operator@sha256:13d8216c9f47a6f73ea6ea5c9ae7b8b38a89c3822e48eeed7271e50970132175_ppc64le",
            "9Base-RHBK-26.2:rhbk/keycloak-rhel9-operator@sha256:4d2cc26a505eda68f7270c8e8a02d794588f9c7ceec98b763d83e3875f957132_amd64",
            "9Base-RHBK-26.2:rhbk/keycloak-rhel9-operator@sha256:88672078ac0b5a0da5b72c11751fa7b0c1c57679ec0f68cb1fe9ba76932397b5_arm64",
            "9Base-RHBK-26.2:rhbk/keycloak-rhel9-operator@sha256:fa9cebe14d003ae002137462fc5833e5634fd040d8f25a66230da9a753891914_s390x",
            "9Base-RHBK-26.2:rhbk/keycloak-rhel9@sha256:01a56463ad6790cf448e66f59a81c229db4159f42e563a13d19de051ec85ca86_s390x",
            "9Base-RHBK-26.2:rhbk/keycloak-rhel9@sha256:58e692074e695bee04981aff9641db8070ba1a49ee6134fcc008046cd84da21d_ppc64le",
            "9Base-RHBK-26.2:rhbk/keycloak-rhel9@sha256:7861ca2441bed95aab1ad43f9159d5c60b522fe3f43833f1847bd1d3ddef94d3_amd64",
            "9Base-RHBK-26.2:rhbk/keycloak-rhel9@sha256:a9aeb0bc33a3461fe2d407896422719b21b184717956cbcebac0da976a220c1c_arm64",
            "9Base-RHBK-26.4:rhbk/keycloak-operator-bundle@sha256:15286c44c4003e787b0bdf9a0bbc5083a2f2312eaf29ccd0c6943232ff52d729_amd64",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9-operator@sha256:2a81955051fb0975bfcb77d25ed64c84038d3c7293f910aeb88f9241be531f9d_amd64",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9-operator@sha256:d8185614aa82117680351c710a5d7b80703a9d450dd02a7becfd1405cbc5ecd5_ppc64le",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9-operator@sha256:d915c75947df63aed99031401dbf570181dba3c5a484eb88438a27892eb7aa72_s390x",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9-operator@sha256:f80c9568ff4b3cc086b7107c8e68db5f548c2b51a01dd8c79d0c9705574a180c_arm64",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9@sha256:554cd90241225b6d64d0e7ada9a8ab50ae2054efdb2f5b2cbdb721475ea296df_arm64",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9@sha256:68b61a98fcdfd46a166cabe097d609d65fd51181860f9ec7f691bbe5d2a986db_s390x",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9@sha256:81773a34d38a8df4b07344fe4ba5670d18684b3579c9d2cf8d0690bf5ec5ab40_amd64",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9@sha256:fa7342d82f080bfe8ffaaf5ba204b98dc435897a388b1501d23a1541fe7f1272_ppc64le",
            "Red Hat build of Keycloak 26.2.16",
            "Red Hat build of Keycloak 26.4.12"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important",
          "product_ids": [
            "9Base-RHBK-26.2:rhbk/keycloak-operator-bundle@sha256:43a89aece29c0a33128e5a7be4ef26d96956fa125df89e22b183c40e50bb8a1d_amd64",
            "9Base-RHBK-26.2:rhbk/keycloak-rhel9-operator@sha256:13d8216c9f47a6f73ea6ea5c9ae7b8b38a89c3822e48eeed7271e50970132175_ppc64le",
            "9Base-RHBK-26.2:rhbk/keycloak-rhel9-operator@sha256:4d2cc26a505eda68f7270c8e8a02d794588f9c7ceec98b763d83e3875f957132_amd64",
            "9Base-RHBK-26.2:rhbk/keycloak-rhel9-operator@sha256:88672078ac0b5a0da5b72c11751fa7b0c1c57679ec0f68cb1fe9ba76932397b5_arm64",
            "9Base-RHBK-26.2:rhbk/keycloak-rhel9-operator@sha256:fa9cebe14d003ae002137462fc5833e5634fd040d8f25a66230da9a753891914_s390x",
            "9Base-RHBK-26.2:rhbk/keycloak-rhel9@sha256:01a56463ad6790cf448e66f59a81c229db4159f42e563a13d19de051ec85ca86_s390x",
            "9Base-RHBK-26.2:rhbk/keycloak-rhel9@sha256:58e692074e695bee04981aff9641db8070ba1a49ee6134fcc008046cd84da21d_ppc64le",
            "9Base-RHBK-26.2:rhbk/keycloak-rhel9@sha256:7861ca2441bed95aab1ad43f9159d5c60b522fe3f43833f1847bd1d3ddef94d3_amd64",
            "9Base-RHBK-26.2:rhbk/keycloak-rhel9@sha256:a9aeb0bc33a3461fe2d407896422719b21b184717956cbcebac0da976a220c1c_arm64",
            "9Base-RHBK-26.4:rhbk/keycloak-operator-bundle@sha256:15286c44c4003e787b0bdf9a0bbc5083a2f2312eaf29ccd0c6943232ff52d729_amd64",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9-operator@sha256:2a81955051fb0975bfcb77d25ed64c84038d3c7293f910aeb88f9241be531f9d_amd64",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9-operator@sha256:d8185614aa82117680351c710a5d7b80703a9d450dd02a7becfd1405cbc5ecd5_ppc64le",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9-operator@sha256:d915c75947df63aed99031401dbf570181dba3c5a484eb88438a27892eb7aa72_s390x",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9-operator@sha256:f80c9568ff4b3cc086b7107c8e68db5f548c2b51a01dd8c79d0c9705574a180c_arm64",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9@sha256:554cd90241225b6d64d0e7ada9a8ab50ae2054efdb2f5b2cbdb721475ea296df_arm64",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9@sha256:68b61a98fcdfd46a166cabe097d609d65fd51181860f9ec7f691bbe5d2a986db_s390x",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9@sha256:81773a34d38a8df4b07344fe4ba5670d18684b3579c9d2cf8d0690bf5ec5ab40_amd64",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9@sha256:fa7342d82f080bfe8ffaaf5ba204b98dc435897a388b1501d23a1541fe7f1272_ppc64le",
            "Red Hat build of Keycloak 26.2.16",
            "Red Hat build of Keycloak 26.4.12"
          ]
        }
      ],
      "title": "keycloak: Keycloak: Denial of Service via specially crafted SAML input"
    }
  ]
}