{"action":"Upgrade org.keycloak:keycloak-services to 26.2.2 or later.","affected":[{"fixed":"26.2.2","introduced":"0"}],"component":"org.keycloak:keycloak-services","cve_ids":["CVE-2025-3501"],"ecosystem":"Maven","epss":0.0047,"exploited":false,"fixed_versions":["26.2.2"],"ghsa_id":"GHSA-hw58-3793-42gg","id":"tcs_01M5N91GBG6DMKJN4GYCAAT1DE","modified_at":"2026-08-07T08:12:17.174371587Z","published_at":"2025-04-30T17:24:21Z","references":["https://osv.dev/vulnerability/GHSA-hw58-3793-42gg","https://github.com/keycloak/keycloak/security/advisories/GHSA-hw58-3793-42gg","https://nvd.nist.gov/vuln/detail/CVE-2025-3501","https://github.com/keycloak/keycloak/issues/39350","https://github.com/keycloak/keycloak/pull/39366","https://github.com/keycloak/keycloak/commit/99ca24c832729075e04d8bc58666089268314272","https://access.redhat.com/errata/RHSA-2025:4335","https://access.redhat.com/errata/RHSA-2025:4336","https://access.redhat.com/security/cve/CVE-2025-3501","https://bugzilla.redhat.com/show_bug.cgi?id=2358834","https://github.com/keycloak/keycloak"],"severity":{"label":"high","score":8.2},"sources":[{"source":"osv","source_id":"GHSA-hw58-3793-42gg","url":"https://osv.dev/vulnerability/GHSA-hw58-3793-42gg"}],"summary":"Keycloak hostname verification"}