Repository navigation
Replies: 3 comments 2 replies
|
Where does this severe secure vulnerability affect Keycloak? Moreover, I can not understand how this github issue may solve the issue. Okhttp version does not go to 4.9.2 |
0 replies
|
Could somebody answer to this ticket, the issue was not removed from the keycloak 20.0.0 or it is not clear what was the fix since version of okhttp was not updated. Thank you |
0 replies
|
Is there any update on this? |
2 replies
|
I have the most recent keycloak version and this is still present. |
|
here you can see all issues I identified in keyckloak: |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
/opt/keycloak/lib/lib/main/com.squareup.okhttp3.okhttp-3.14.9.jar
the vulnerable jar file of square/okhttp is found in quarkus distribution from version 18.0.0 till 20.0.1
details on vulnerability:
lysine-dev/okhttp#6738
Could somebody assess the risk and update? The fix shall be available in 4.9
All reactions