Package Health/org.keycloak:keycloak-services

keycloak-services

Stable versioning and no deprecation notice add confidence for adoption. The artifact has no runtime dependencies, and Maven PGP signing provides useful publication integrity; source and license checks remain incomplete.

Latest 26.7.5org.keycloak

Maven

88%

Total Score

Dependencies

100

Maturity

100

Supply Chain

100

Attestations

100

Are you affected? Scan for Free

Health Score Breakdown

All health scores are okay.

Vulnerabilities

Title	Versions	Severity
AIKIDO-2026-201368 keycloak-services is vulnerable to Improper Access Control in versions 26.5.0 - 26.5.2.	26.5.0 - 26.5.2	High
AIKIDO-2026-61094 keycloak-services is vulnerable to Information Disclosure in versions 26.0.0 - 26.7.1.	26.0.0 - 26.7.1	Medium
AIKIDO-2026-410326 keycloak-services is vulnerable to Authorization Bypass in versions 26.2.0 - 26.7.1.	26.2.0 - 26.7.1	Medium
AIKIDO-2026-609840 keycloak-services is vulnerable to Authorization Bypass in versions 26.2.0 - 26.7.1.	26.2.0 - 26.7.1	Medium
AIKIDO-2026-89054 keycloak-services is vulnerable to Authentication Bypass in versions 26.0.0 - 26.7.1.	26.0.0 - 26.7.1	Critical

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

Dependency	Last Release	Score
org.keycloak:keycloak-core Version *	—	—
jakarta.mail:jakarta.mail-api Version *	—	—
org.eclipse.angus:angus-mail Version *	—	—
org.keycloak:keycloak-common Version *	—	—
org.twitter4j:twitter4j-core Version *	—	—