Skip to content

Commit a3876fb

Browse files
advisory-database[bot]advisory-database[bot]
committed
Publish Advisories
GHSA-4qpp-gxm3-h9vw GHSA-284g-mwvh-9gpr GHSA-2rmv-mx4c-h2wv GHSA-8jcf-mmqr-2rq2 GHSA-g25j-v4g6-r93j GHSA-m2w5-7xhv-w6fh GHSA-qgv7-gqp9-gvmf GHSA-qhwv-3xrq-pjmj GHSA-x439-wrmp-cj57
1 parent f2ac389 commit a3876fb

9 files changed

Lines changed: 228 additions & 1 deletion

File tree

‎advisories/unreviewed/2025/12/GHSA-4qpp-gxm3-h9vw/GHSA-4qpp-gxm3-h9vw.json‎

Lines changed: 13 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-4qpp-gxm3-h9vw",
4-
"modified": "2026-01-20T18:31:52Z",
4+
"modified": "2026-01-21T06:31:19Z",
55
"published": "2025-12-11T15:30:32Z",
66
"aliases": [
77
"CVE-2025-14523"
@@ -43,6 +43,18 @@
4343
"type": "WEB",
4444
"url": "https://access.redhat.com/errata/RHSA-2026:0868"
4545
},
46+
{
47+
"type": "WEB",
48+
"url": "https://access.redhat.com/errata/RHSA-2026:0905"
49+
},
50+
{
51+
"type": "WEB",
52+
"url": "https://access.redhat.com/errata/RHSA-2026:0906"
53+
},
54+
{
55+
"type": "WEB",
56+
"url": "https://access.redhat.com/errata/RHSA-2026:0907"
57+
},
4658
{
4759
"type": "WEB",
4860
"url": "https://access.redhat.com/security/cve/CVE-2025-14523"

‎advisories/unreviewed/2026/01/GHSA-284g-mwvh-9gpr/GHSA-284g-mwvh-9gpr.json‎

Lines changed: 25 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,25 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-284g-mwvh-9gpr",
4+
"modified": "2026-01-21T06:31:19Z",
5+
"published": "2026-01-21T06:31:19Z",
6+
"aliases": [
7+
"CVE-2026-24025"
8+
],
9+
"details": "Rejected reason: Not used",
10+
"severity": [],
11+
"affected": [],
12+
"references": [
13+
{
14+
"type": "ADVISORY",
15+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-24025"
16+
}
17+
],
18+
"database_specific": {
19+
"cwe_ids": [],
20+
"severity": null,
21+
"github_reviewed": false,
22+
"github_reviewed_at": null,
23+
"nvd_published_at": "2026-01-21T05:16:11Z"
24+
}
25+
}

‎advisories/unreviewed/2026/01/GHSA-2rmv-mx4c-h2wv/GHSA-2rmv-mx4c-h2wv.json‎

Lines changed: 25 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,25 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-2rmv-mx4c-h2wv",
4+
"modified": "2026-01-21T06:31:19Z",
5+
"published": "2026-01-21T06:31:19Z",
6+
"aliases": [
7+
"CVE-2026-24020"
8+
],
9+
"details": "Rejected reason: Not used",
10+
"severity": [],
11+
"affected": [],
12+
"references": [
13+
{
14+
"type": "ADVISORY",
15+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-24020"
16+
}
17+
],
18+
"database_specific": {
19+
"cwe_ids": [],
20+
"severity": null,
21+
"github_reviewed": false,
22+
"github_reviewed_at": null,
23+
"nvd_published_at": "2026-01-21T05:16:10Z"
24+
}
25+
}

‎advisories/unreviewed/2026/01/GHSA-8jcf-mmqr-2rq2/GHSA-8jcf-mmqr-2rq2.json‎

Lines changed: 25 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,25 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-8jcf-mmqr-2rq2",
4+
"modified": "2026-01-21T06:31:19Z",
5+
"published": "2026-01-21T06:31:19Z",
6+
"aliases": [
7+
"CVE-2026-24022"
8+
],
9+
"details": "Rejected reason: Not used",
10+
"severity": [],
11+
"affected": [],
12+
"references": [
13+
{
14+
"type": "ADVISORY",
15+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-24022"
16+
}
17+
],
18+
"database_specific": {
19+
"cwe_ids": [],
20+
"severity": null,
21+
"github_reviewed": false,
22+
"github_reviewed_at": null,
23+
"nvd_published_at": "2026-01-21T05:16:11Z"
24+
}
25+
}

‎advisories/unreviewed/2026/01/GHSA-g25j-v4g6-r93j/GHSA-g25j-v4g6-r93j.json‎

Lines changed: 25 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,25 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-g25j-v4g6-r93j",
4+
"modified": "2026-01-21T06:31:19Z",
5+
"published": "2026-01-21T06:31:19Z",
6+
"aliases": [
7+
"CVE-2026-24023"
8+
],
9+
"details": "Rejected reason: Not used",
10+
"severity": [],
11+
"affected": [],
12+
"references": [
13+
{
14+
"type": "ADVISORY",
15+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-24023"
16+
}
17+
],
18+
"database_specific": {
19+
"cwe_ids": [],
20+
"severity": null,
21+
"github_reviewed": false,
22+
"github_reviewed_at": null,
23+
"nvd_published_at": "2026-01-21T05:16:11Z"
24+
}
25+
}

‎advisories/unreviewed/2026/01/GHSA-m2w5-7xhv-w6fh/GHSA-m2w5-7xhv-w6fh.json‎

Lines changed: 40 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,40 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-m2w5-7xhv-w6fh",
4+
"modified": "2026-01-21T06:31:20Z",
5+
"published": "2026-01-21T06:31:20Z",
6+
"aliases": [
7+
"CVE-2026-1035"
8+
],
9+
"details": "A flaw was found in the Keycloak server during refresh token processing, specifically in the TokenManager class responsible for enforcing refresh token reuse policies. When strict refresh token rotation is enabled, the validation and update of refresh token usage are not performed atomically. This allows concurrent refresh requests to bypass single-use enforcement and issue multiple access tokens from the same refresh token. As a result, Keycloak’s refresh token rotation hardening can be undermined.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-1035"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://access.redhat.com/security/cve/CVE-2026-1035"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430314"
29+
}
30+
],
31+
"database_specific": {
32+
"cwe_ids": [
33+
"CWE-367"
34+
],
35+
"severity": "LOW",
36+
"github_reviewed": false,
37+
"github_reviewed_at": null,
38+
"nvd_published_at": "2026-01-21T06:15:46Z"
39+
}
40+
}

‎advisories/unreviewed/2026/01/GHSA-qgv7-gqp9-gvmf/GHSA-qgv7-gqp9-gvmf.json‎

Lines changed: 25 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,25 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-qgv7-gqp9-gvmf",
4+
"modified": "2026-01-21T06:31:19Z",
5+
"published": "2026-01-21T06:31:19Z",
6+
"aliases": [
7+
"CVE-2026-24021"
8+
],
9+
"details": "Rejected reason: Not used",
10+
"severity": [],
11+
"affected": [],
12+
"references": [
13+
{
14+
"type": "ADVISORY",
15+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-24021"
16+
}
17+
],
18+
"database_specific": {
19+
"cwe_ids": [],
20+
"severity": null,
21+
"github_reviewed": false,
22+
"github_reviewed_at": null,
23+
"nvd_published_at": "2026-01-21T05:16:10Z"
24+
}
25+
}

‎advisories/unreviewed/2026/01/GHSA-qhwv-3xrq-pjmj/GHSA-qhwv-3xrq-pjmj.json‎

Lines changed: 25 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,25 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-qhwv-3xrq-pjmj",
4+
"modified": "2026-01-21T06:31:20Z",
5+
"published": "2026-01-21T06:31:20Z",
6+
"aliases": [
7+
"CVE-2026-24026"
8+
],
9+
"details": "Rejected reason: Not used",
10+
"severity": [],
11+
"affected": [],
12+
"references": [
13+
{
14+
"type": "ADVISORY",
15+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-24026"
16+
}
17+
],
18+
"database_specific": {
19+
"cwe_ids": [],
20+
"severity": null,
21+
"github_reviewed": false,
22+
"github_reviewed_at": null,
23+
"nvd_published_at": "2026-01-21T05:16:11Z"
24+
}
25+
}

‎advisories/unreviewed/2026/01/GHSA-x439-wrmp-cj57/GHSA-x439-wrmp-cj57.json‎

Lines changed: 25 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,25 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-x439-wrmp-cj57",
4+
"modified": "2026-01-21T06:31:19Z",
5+
"published": "2026-01-21T06:31:19Z",
6+
"aliases": [
7+
"CVE-2026-24024"
8+
],
9+
"details": "Rejected reason: Not used",
10+
"severity": [],
11+
"affected": [],
12+
"references": [
13+
{
14+
"type": "ADVISORY",
15+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-24024"
16+
}
17+
],
18+
"database_specific": {
19+
"cwe_ids": [],
20+
"severity": null,
21+
"github_reviewed": false,
22+
"github_reviewed_at": null,
23+
"nvd_published_at": "2026-01-21T05:16:11Z"
24+
}
25+
}

0 commit comments

Comments
 (0)