organizations

This release addresses numerous security vulnerabilities, including issues related to memory allocation, permission bypass, and secret leakage. It also includes several bug fixes and dependency upgrades, such as to Quarkus 3.33.3.1 and jackson-databind 2.21.5.

This release addresses several security vulnerabilities, enhances database encryption, and resolves numerous bugs across various components including the admin UI, clients, and core functionality.

This release focuses heavily on security fixes, addressing several CVEs related to request smuggling, thread exhaustion, and unauthorized token issuance. It also includes numerous bug fixes across core components like Infinispan, OIDC, and database migrations.

This release upgrades Keycloak to Quarkus 3.20.3 LTS and removes the explicit MariaDB connector dependency. Several security vulnerabilities related to Netty were also addressed.

This release introduces a security enhancement to force federated users to re-login after resetting credentials by defaulting the 'force-login' option to 'only-federated' in the reset email authenticator. It also resolves numerous bugs across UI, authentication, storage, and addresses several CVEs.

This release introduces significant breaking changes related to user date field typing and client update request schemas, alongside numerous feature additions for FedCM, Token Vaults, and Attack Protection.