{"action":"Upgrade org.keycloak:keycloak-quarkus-server to 26.0.6 or later.","affected":[{"fixed":"26.0.6","introduced":"25.0.0"}],"component":"org.keycloak:keycloak-quarkus-server","cve_ids":["CVE-2024-10973"],"ecosystem":"Maven","epss":0.00269,"exploited":false,"fixed_versions":["26.0.6"],"ghsa_id":"GHSA-g6qq-c9f9-2772","id":"tcs_01M5N8XJJ10GB7EHVBTQH5TRNR","modified_at":"2025-02-05T21:42:03.741955Z","published_at":"2025-02-05T21:18:26Z","references":["https://osv.dev/vulnerability/GHSA-g6qq-c9f9-2772","https://github.com/keycloak/keycloak/security/advisories/GHSA-g6qq-c9f9-2772","https://nvd.nist.gov/vuln/detail/CVE-2024-10973","https://github.com/keycloak/keycloak/issues/28750","https://github.com/keycloak/keycloak/issues/34644","https://github.com/keycloak/keycloak/pull/28756","https://github.com/keycloak/keycloak/pull/34668","https://github.com/keycloak/keycloak/commit/071032a108bd9e9fce9e66d00c36d56bd4b334df","https://github.com/keycloak/keycloak/commit/36defd5f33b2da5d705f179bbaa21c28b13a9996","https://access.redhat.com/security/cve/CVE-2024-10973","https://bugzilla.redhat.com/show_bug.cgi?id=2324361","https://github.com/keycloak/keycloak"],"severity":{"label":"medium","score":5.7},"sources":[{"source":"osv","source_id":"GHSA-g6qq-c9f9-2772","url":"https://osv.dev/vulnerability/GHSA-g6qq-c9f9-2772"}],"summary":"Keycloak on Quarkus CLI option for encrypted JGroups ignored"}