Archive • Keycloak Advisory Watch • Buttondown

Keycloak security fixes in 26.8.1

October 13, 2026

Keycloak 26.8.1 shipped on 2026-10-13. Its release notes and the issues they link name 18 Keycloak CVEs and 9 dependency CVEs, and none of them is on...

Keycloak security fixes 26.7.4 to 26.8.0: the catch-up

October 12, 2026

Our last issue covered the one advisory Keycloak published on GitHub on 2026-09-16. Keycloak shipped more than that. The release notes for 26.7.4, 26.7.5 and...

Keycloak advisory batch 2026-09-16: 1 advisory, 1 high or critical — what clears them

September 17, 2026

Keycloak published 1 advisory on 2026-09-16 — 1 rated high or critical. Here is the batch, the patched versions it shipped per maintained line, and what we...