Keycloak

This release addresses numerous security vulnerabilities, including issues related to memory allocation, permission bypass, and secret leakage. It also includes several bug fixes and dependency upgrades, such as to Quarkus 3.33.3.1 and jackson-databind 2.21.5.

This release addresses several security vulnerabilities and bug fixes, including issues related to JWE request objects, privilege escalation, admin UI extensions, fine-grained permissions, WebAuthn, clustering, and password resets.

This release focuses heavily on security fixes, addressing numerous CVEs across various components like OIDC, SAML, and LDAP. It also includes several enhancements such as upgrading Quarkus and adding startup checks for database indexes.

This release addresses several security vulnerabilities, enhances database encryption, and resolves numerous bugs across various components including the admin UI, clients, and core functionality.

This release focuses heavily on security fixes, addressing multiple CVEs related to access control, path traversal, and DoS vulnerabilities. It also includes an upgrade to Quarkus 3.27.3.

This release focuses primarily on security fixes, addressing several CVEs related to SAML broker vulnerabilities and improper enforcement of disabled identity providers.

This release focuses heavily on security fixes, addressing several CVEs related to token grants and authorization checks. It also includes numerous bug fixes addressing memory consumption, client token refreshing, and CI/testing stability.

This release focuses heavily on security fixes, addressing several CVEs related to request smuggling, thread exhaustion, and unauthorized token issuance. It also includes numerous bug fixes across core components like Infinispan, OIDC, and database migrations.

This release focuses on numerous bug fixes across the Admin UI, authentication, SAML, and database upgrades. Key enhancements include performance improvements and expanded realm management capabilities from the master realm.

This release introduces preview features like Workflows and JWT Authorization Grants, enhances administration with organization invitation management, and adds OpenTelemetry support. It also provides documentation updates and security standard compliance improvements.

This release focuses on bug fixes for SAML initialization and group permission handling, alongside an upgrade to Quarkus 3.27.1 and documentation enhancements.

This release introduces a security enhancement by filtering LDAP referrals by default and resolves numerous bugs across security, infinispan, UI, and CI components.

This release focuses on resolving numerous bugs across various components, including flaky tests, database migration issues, user profile handling, and administrative UI regressions.

This release introduces several enhancements, including workflow role authorization and email verification rate limiting, alongside numerous bug fixes addressing issues in UI, LDAP handling, session management, and fine-grained permissions (FGAP).

This release includes enhancements such as SPIFFE support for OIDC JWK endpoints and resolves several bugs across CI, authentication, identity brokering, UI, and core server functionality.

This release introduces security enhancements, notably disabling Secure Client-Initiated Renegotiation by default in Quarkus distributions, and resolves numerous bugs across authentication, token exchange, UI, and persistence layers.

This release introduces significant security and standards enhancements, including Passkeys, full DPoP support, and FAPI 2 Final compliance. It also adds integration improvements like Federated Client Authentication (preview) and automatic certificate management for SAML clients.

This release upgrades Keycloak to Quarkus 3.20.3 LTS and removes the explicit MariaDB connector dependency. Several security vulnerabilities related to Netty were also addressed.

This release focuses on stability and security by resolving numerous bugs across core functionality, authentication, and the admin UI. Key enhancements include upgrading to Quarkus 3.20.2.2 and improving multithreading safety.