Tag

ssrf

Articles tagged with ssrf.

security

OpenAM PKCE Bypass and JWKS SSRF (2026): Lessons for Keycloak OIDC Clients

OpenAM before 16.1.3 skipped PKCE on hybrid flows (CVE-2026-105119) and fetched unvalidated jwks_uri values (CVE-2026-105122). Here is the Keycloak checklist.

Guilliano MolaireGuilliano Molaire11 min read

Stay ahead on identity & security

Get tutorials, product updates, and Keycloak tips delivered to your inbox.

Start Free TrialTalk to Sales
© 2026 Skycloak. All Rights Reserved. Design by Yasser SolimanKeycloak™ is a trademark of the Linux Foundation. Skycloak is not affiliated with the Keycloak project.