CGA-28mx-p7j5-mc2w

This vulnerability affects the keycloak-services component version 26.3.2. The GitHub Advisory indicates no fix is currently available (firstPatchedVersion: null). This is a self-contained vulnerability in the Keycloak services JAR that requires upstream maintainers to develop and release a security fix. Unlike the EOL keycloak-21.1 package, this is an actively supported version that should receive security updates from upstream.