{"action":"Upgrade org.keycloak:keycloak-quarkus-server to 26.5.6 or later.","affected":[{"fixed":"26.5.6","introduced":"0"}],"component":"org.keycloak:keycloak-quarkus-server","cve_ids":["CVE-2025-11537"],"ecosystem":"Maven","epss":0.00164,"exploited":false,"fixed_versions":["26.5.6"],"ghsa_id":"GHSA-gv3v-2cpp-3pmq","id":"tcs_01M5N8YYRY7NETY8DDB963E62N","modified_at":"2026-09-10T03:50:35.212288442Z","published_at":"2026-02-10T12:30:28Z","references":["https://osv.dev/vulnerability/GHSA-gv3v-2cpp-3pmq","https://nvd.nist.gov/vuln/detail/CVE-2025-11537","https://github.com/keycloak/keycloak/commit/137a35c1109ff43a305f26264978a3ea21452373","https://github.com/keycloak/keycloak/commit/5a3cdb7c4ccbf83ffc926f70d655a60269d7207b","https://github.com/keycloak/keycloak/commit/9622f550a6e565b29a3a37454421f08626791a6c","https://access.redhat.com/security/cve/CVE-2025-11537","https://bugzilla.redhat.com/show_bug.cgi?id=2402616","https://github.com/keycloak/keycloak","https://www.keycloak.org/server/logging#_change_log_formatpattern"],"severity":{"label":"medium","score":5},"sources":[{"source":"osv","source_id":"GHSA-gv3v-2cpp-3pmq","url":"https://osv.dev/vulnerability/GHSA-gv3v-2cpp-3pmq"}],"summary":"Keycloak logs sensitive headers"}