Repository navigation
GHSA-37gf-gmxv-74wv CVE-2026-1486 need guidance between GHSA recommendation vs other statement
#46500
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
Uh oh!
There was an error while loading. Please reload this page.
Hello,
I'm seeking your guidance regarding this CVE-2026-1486, where GHSA is recommended version 26.5.3 and 26.4.9.
According to this link: #45177
It is mentioned as followed:
Since Keycloak 26.5.0 release, we have feature JWT_AUTHORIZATION_GRANT as preview feature in Keycloak. The point of this task is to make sure that feature can be promoted to supported. Ideally in 26.6.0 release.
From above statement 26.4.9 may not have feature named JWT_AUTHORIZATION_GRANT.
Please advice if the assumption is correct.
Is the GHSA recommendation need to be corrected?
Thank you
All reactions