{"action":"Upgrade org.keycloak:keycloak-services to 24.0.9 (24.x) or 26.0.6 (26.x) or later.","affected":[{"fixed":"24.0.9","introduced":"0"},{"fixed":"26.0.6","introduced":"25.0.0"}],"component":"org.keycloak:keycloak-services","cve_ids":["CVE-2024-10270"],"ecosystem":"Maven","epss":0.01245,"exploited":false,"fixed_versions":["24.0.9","26.0.6"],"ghsa_id":"GHSA-wq8x-cg39-8mrr","id":"tcs_01M5N9GZEJPPXKCFT2Z3F72W83","modified_at":"2026-09-10T03:50:21.246600240Z","published_at":"2024-11-25T18:32:12Z","references":["https://osv.dev/vulnerability/GHSA-wq8x-cg39-8mrr","https://github.com/keycloak/keycloak/security/advisories/GHSA-wq8x-cg39-8mrr","https://nvd.nist.gov/vuln/detail/CVE-2024-10270","https://github.com/keycloak/keycloak/commit/5d6c91f3309db468b0fe4834e88c3d25649f73e4","https://access.redhat.com/errata/RHSA-2024:10175","https://access.redhat.com/errata/RHSA-2024:10176","https://access.redhat.com/errata/RHSA-2024:10177","https://access.redhat.com/errata/RHSA-2024:10178","https://access.redhat.com/security/cve/CVE-2024-10270","https://bugzilla.redhat.com/show_bug.cgi?id=2321214","https://github.com/keycloak/keycloak"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-wq8x-cg39-8mrr","url":"https://osv.dev/vulnerability/GHSA-wq8x-cg39-8mrr"}],"summary":"org.keycloak:keycloak-services has Inefficient Regular Expression Complexity"}