Repository navigation
Any plans to address CVE-2022-37434? #13814
Unanswered
Collisio-Adolebitque
asked this question in
Q&A
Replies: 3 comments 2 replies
|
@Collisio-Adolebitque could you please elaborate more? Which version of Keycloak do you believe is affected by the CVE-2022-37434 above? What makes you believe that Keycloak is vulnerable by the CVE mentioned? |
1 reply
|
Because Trivy flagged it in a scan. |
|
@Collisio-Adolebitque we don't have any Keycloak container image tagged as Added to that, it is strongly recommended to upgrade to the latest release (19.0.1). I hope it brings some clarity. |
1 reply
|
It was Keycloak version 16.1.1. |
|
@Collisio-Adolebitque that was certainly was addressed on the latest releases. Considering that we don't have enough bandwidth to maintain old images, please upgrade. |
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
Lead to believe that KeyCloak is vulnerable to a critical buffer overflow: https://nvd.nist.gov/vuln/detail/CVE-2022-37434. Can anyone confirm and advise what the resolution is?
All reactions