keycloak-fips-26.4
Chainguard
Status
Justification
Impact
keycloak-fips-26.4.7 uses a patched dependency, however, the scanners are not able to reconcile that com.microsoft.sqlserver.mssql-jdbc-13.2.1.jre11.jar matches patched version 13.2.1.jre11. Ref https://github.com/advisories/GHSA-m494-w24q-6f7w#:~:text=12.10.2.jre11-,13.2.1.jre11,-10.2.4.jre11
Status