Skip to content

[Backport 26.6] Group hierarchy search discloses hidden parent groups under FGAP v2 - #51296

Open
pedroigor wants to merge 1 commit into
keycloak:release/26.6from
pedroigor:cve-891-bp-26.6
Open

[Backport 26.6] Group hierarchy search discloses hidden parent groups under FGAP v2#51296
pedroigor wants to merge 1 commit into
keycloak:release/26.6from
pedroigor:cve-891-bp-26.6

Conversation

@pedroigor

Copy link
Copy Markdown
Contributor

Closes #50966

@pedroigor
pedroigor requested review from a team as code owners July 29, 2026 20:02
@ahus1 ahus1 assigned ahus1 and unassigned ahus1 Aug 6, 2026

@ahus1 ahus1 left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

migration guide changes need to go to 26.6.6, as 26.6.5 was already released. Pleaes have someone from your team review this PR to get it merged.

@pedroigor

Copy link
Copy Markdown
Contributor Author

@ahus1, rebased.

@ahus1

ahus1 commented Aug 11, 2026

Copy link
Copy Markdown
Member

@pedroigor - 26.6.6 is already frozen, you should now target 26.6.7

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants