8000 Wildcards should not be allowed if authority cannot be parsed by rmartinc · Pull Request #49130 · keycloak/keycloak · GitHub
[go: up one dir, main page]

Skip to content

Wildcards should not be allowed if authority cannot be parsed - #49130

Merged
stianst merged 1 commit into
keycloak:mainfrom
rmartinc:issue-49109
May 20, 2026
Merged

stianst merged 1 commit into
keycloak:mainfrom
rmartinc:issue-49109

Conversation

@rmartinc
Copy link
Copy Markdown
Contributor

Closes CVE-2026-7504
Closes #49109

Backport to main.

@rmartinc
rmartinc requested a review from a team as a code owner May 19, 2026 15:52
@stianst stianst self-assigned this May 20, 2026
@stianst
stianst merged commit 4796207 into keycloak:main May 20, 2026
140 of 142 checks passed
@stianst stianst mentioned this pull request Jun 1, 2026
sashyo pushed a commit to tide-foundation/keycloak-IGA that referenced this pull request Jul 20, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[CVE-2026-7504] Security Vulnerability Report: Redirect URI Validation Bypass in Keycloak

2 participants

0