CGA-8mcw-23rc-5c24

Published

Last updated

https://images.chainguard.dev/security/CGA-8mcw-23rc-5c24

Package

keycloak-fips-26.3

Repository

Chainguard

Latest Update

Fix not planned

Aliases

CVE-2025-11429
GHSA-64w3-5q9m-68xf

Severity

5.4

Medium

CVSS V3

References

https://nvd.nist.gov/vuln/detail/CVE-2025-11429
https://github.com/advisories/GHSA-64w3-5q9m-68xf

Updates

Status

Fix not planned

Impact

Keycloak 26.3.x became EOL on Sep 30, 2025 and will not be receiving this security fix from upstream. Chainguard recommends updating to keycloak 26.4.x or later.

Status

Under investigation

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

The trusted source for open source

Talk to an expert

Privacy

Terms

CGA-8mcw-23rc-5c24

Severity

References

Updates

The trusted source for open source

Product

Solutions

Customers

Resources

Company