[keycloak-user] OWASP check

Ondrej Scerba Ondrej.Scerba at zoomint.com
Thu Jan 31 12:18:18 EST 2019

Previous message: [keycloak-user] Custom Authenticator
Next message: [keycloak-user] Expose role attributes in Keycloak javascript adapter
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Hi,

Lastest Keycloak version (4.8.3.Final) contains several potential security issues related to jackson-databind library. All isues should be resolved, when you update jackson-databind to version 2.9.8 or higher.

Could you please fix it?

Thanks,
Ondrej

Previous message: [keycloak-user] Custom Authenticator
Next message: [keycloak-user] Expose role attributes in Keycloak javascript adapter
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

More information about the keycloak-user mailing list