Bruno Oliveira da Silva comments

Results 99 comments of


                                            Bruno Oliveira da Silva

CVE-2022-31197 - SQL Injection vulnerability in org.postgresql:postgresql

@trixpan that's correct, and thanks for bringing this to our attention.

CVE-2022-31197 - SQL Injection vulnerability in org.postgresql:postgresql

@mikemicky4321 Keycloak 20, please see the milestone.

Keycloak Submission for Incubation

Hi @rochaporto, the answer is yes. Currently, we have been actively working on the due diligence document.

`upload-sarif@v3`: could not convert rules: invalid security severity value, is not a number: undefined

@aeisenberg your assessment seems accurate to me. I tried to downgrade upload-sarif to v2 and the issue persists.

Keycloak does not work with Docker read_only: true

@andre-taveira @Zipunrar would you be able to provide a reproducer with k8s?

Implement default client policies for PKCE enforcement

FYI @keycloak/core

Reset password flow fails with "Page has expired" error when Kerberos authentication is enabled in the browser flow

@ynojima as this is an open-source community project, we cannot fill your request. I would suggest you to contact the Red Hat Single Sign-On (https://access.redhat.com/products/red-hat-single-sign-on), support from Red Hat.

Reset password flow fails with "Page has expired" error when Kerberos authentication is enabled in the browser flow

@douglaspalmer if Keycloak is not impacted by this issue, please feel free to close the issue.

Reset password flow fails with "Page has expired" error when Kerberos authentication is enabled in the browser flow

Reopening it until have more clarity about it.

[PROJECT ONBOARDING] Keycloak

@amye Keycloak does have an open governance written here https://github.com/keycloak/keycloak/blob/main/GOVERNANCE.md, I believe we can check this item as completed.