Publish Advisories

GHSA-22rm-wp4x-v5cx
GHSA-4pgc-gfrr-wcmg

Author: advisory-database[bot]

advisories/github-reviewed/2026/03/GHSA-22rm-wp4x-v5cx/GHSA-22rm-wp4x-v5cx.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-22rm-wp4x-v5cx",
-  "modified": "2026-03-27T20:03:17Z",
+  "modified": "2026-04-13T18:35:11Z",
   "published": "2026-03-26T09:30:28Z",
   "aliases": [
     "CVE-2026-4874"
@@ -28,7 +28,7 @@
               "introduced": "0"
             },
             {
-              "last_affected": "26.5.6"
+              "last_affected": "26.6.0"
             }
           ]
         }

advisories/github-reviewed/2026/03/GHSA-4pgc-gfrr-wcmg/GHSA-4pgc-gfrr-wcmg.json

@@ -1,12 +1,12 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-4pgc-gfrr-wcmg",
-  "modified": "2026-03-26T19:25:57Z",
+  "modified": "2026-04-13T18:36:28Z",
   "published": "2026-03-23T09:30:30Z",
   "aliases": [
     "CVE-2026-4628"
   ],
-  "summary": "Keycloak has Improper Access Control allows attackers with valid credentials to bypass the allowRemoteResourceManagement=false",
+  "summary": "Keycloak has Improper Access Control that allows attackers with valid credentials to bypass the allowRemoteResourceManagement=false",
   "details": "A flaw was found in Keycloak. An improper Access Control vulnerability in Keycloak’s User-Managed Access (UMA) resource_set endpoint allows attackers with valid credentials to bypass the allowRemoteResourceManagement=false restriction. This occurs due to incomplete enforcement of access control checks on PUT operations to the resource_set endpoint. This issue enables unauthorized modification of protected resources, impacting data integrity.",
   "severity": [
     {
@@ -28,7 +28,7 @@
               "introduced": "0"
             },
             {
-              "last_affected": "26.5.6"
+              "last_affected": "26.6.0"
             }
           ]
         }