AI-analyzed release notes for CNCF graduated and incubating projects.
Keycloak 26.5.1 is a maintenance release with a security fix in the Organization feature. It also contains correctness fixes, a performance improvement, and changes to HTTP responses and realm administration.
Check if affected (1)
securityThe Organization feature account-name exposure fix
Applies if you use the Organization feature.
The Organization feature no longer exposes and automatically fills the account name in the user/password form. The fix ships in Keycloak 26.5.1.
A substantial feature and maintenance release adds operator capabilities including workflows, JWT authorization grants, organization invitations, OpenTelemetry export, and Windows services. It also updates Quarkus and fixes correctness issues, while changing supported database versions and addressing a vulnerability in brute force detection settings.
Check if affected (2)
securityBrute force detection settings vulnerability, corrected
Applies if you configure brute force detection settings.
A vulnerability in brute force detection settings is corrected in Keycloak 26.5.0.
breakingPostgreSQL 13. support removal
Applies if you depend on PostgreSQL 13..
Support for PostgreSQL 13. is removed in Keycloak 26.5.0.
Plan ahead (1)
deprecatedFine-Grained Admin Permissions v1, deprecated
Applies if you enable admin/fine-grained-permissions.
Fine-Grained Admin Permissions v1 is deprecated in Keycloak 26.5.0 under admin/fine-grained-permissions.
