{"action":"Upgrade org.keycloak:keycloak-services to 26.6.2 or later.","affected":[{"fixed":"26.6.2","introduced":"0"}],"component":"org.keycloak:keycloak-services","cve_ids":["CVE-2026-37978"],"ecosystem":"Maven","epss":0.00429,"exploited":false,"fixed_versions":["26.6.2"],"ghsa_id":"GHSA-rrv7-3mqf-hxfr","id":"tcs_01M5N9CF5RNW3S2ZJT99V80RYG","modified_at":"2026-08-26T01:11:25.629505782Z","published_at":"2026-05-19T12:31:39Z","references":["https://osv.dev/vulnerability/GHSA-rrv7-3mqf-hxfr","https://nvd.nist.gov/vuln/detail/CVE-2026-37978","https://github.com/keycloak/keycloak/commit/492d1f04cdad425dadb9d5e1faa94dd17a875573","https://github.com/keycloak/keycloak/commit/ba9a18744dcec2ef46f284d25c1c0aa1c962a500","https://access.redhat.com/errata/RHSA-2026:19596","https://access.redhat.com/errata/RHSA-2026:19597","https://access.redhat.com/security/cve/CVE-2026-37978","https://bugzilla.redhat.com/show_bug.cgi?id=2455327","https://github.com/keycloak/keycloak"],"severity":{"label":"medium","score":4.9},"sources":[{"source":"osv","source_id":"GHSA-rrv7-3mqf-hxfr","url":"https://osv.dev/vulnerability/GHSA-rrv7-3mqf-hxfr"}],"summary":"Keycloak: Information Disclosure via evaluate-scopes Admin API"}