Repository navigation
|
I'm using Keycloak version 9.0.2 and looking for ways to address security vulnerabilities without:
I know upgrading is the recommended approach, but this isn't currently feasible in my situation. Has anyone found effective mitigations to the security vulnerabilities, especially the more critical ones, on older versions, like 9.0.2? Any insights or sharing of experience would be greatly appreciated. |
Answered by
stianst
Aug 19, 2025
Replies: 1 comment
|
You will not be able to mitigate all CVEs, including CVEs in dependencies, since 9.0.2. Even reviewing all the CVEs that would need mitigating would be an insane amount of work. I'm sorry, but upgrading is your only safe option. |
0 replies
Answer selected by
mland31
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
You will not be able to mitigate all CVEs, including CVEs in dependencies, since 9.0.2. Even reviewing all the CVEs that would need mitigating would be an insane amount of work.
I'm sorry, but upgrading is your only safe option.