CLEANSTART-2026-HH70235: buffer overflow vulnerability in the Brotli decoder (c/dec/decode
Published Nov 5, 2026
Security vulnerability affects the keycloak package. A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.
Affected Software
1 affected componentFixes available
cleanstart/keycloak<26.8.1-r1
26.8.1-r1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
cleanstart/keycloakto a version that resolves this vulnerability.Fixed in 26.8.1-r1
Event History
Nov 5, 2026
Advisory Published
via OSV·12:37 AM
Data Sourced
via OSV·12:37 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
The supplied vector indicates network-based exploitation with low attack complexity, no privileges required, and no user interaction required. Successful exploitation can affect confidentiality, integrity, and availability.
2
Which deployments should be treated as potentially exposed?
The advisory identifies the affected software as cleanstart/keycloak and does not provide affected or fixed version ranges. Any deployment using this package should be investigated until its dependency and patch status can be confirmed.