Skip to content

CVE-2026-84939 org.freemarker:freemarker #52888

New issue
New issue
Closed
cve
#52889
Closed
CVE-2026-84939 org.freemarker:freemarker#52888
cve
#52889
Assignees
stianst
Labels
kind/cveIssues identified as CVEs on third-party dependencies, or issues which Keycloak is not affectedrelease/26.4.17release/26.6.8release/26.7.5release/26.8.0team/cloud-nativeteam/communityteam/continuous-deliveryteam/core-authnteam/core-clientsteam/core-iamteam/core-protocolsteam/core-sharedteam/production-readinessteam/security

Description

@stianst
stianst
opened on Sep 17, 2026

Description

CVE-2026-84939

  • Installed versions: 2.3.32
  • Fixed versions: 2.3.35

Activity

  1. stianst
    added the
    task
    issue type on Sep 17, 2026
  2. stianst
    added
    kind/task
    on Sep 17, 2026
  3. github-project-automation
    added this to Keycloak Roadmapon Sep 17, 2026
  4. stianst
    self-assigned this
    on Sep 17, 2026
  5. github-project-automation
    moved this to Open in Keycloak Roadmapon Sep 17, 2026
  6. stianst
    changed the issue type from
    task
    to
    cve
    on Sep 17, 2026
  7. keycloak-github-bot
    added
    kind/cveIssues identified as CVEs on third-party dependencies, or issues which Keycloak is not affected
    and removed
    kind/task
    on Sep 17, 2026
  8. stianst
    added
    backport/26.4
    backport/26.6
    backport/26.7
    on Sep 17, 2026
  9. stianst
    added a commit that references this issue on Sep 17, 2026

    Update to FreeMarker 2.3.35

    a44bea3
  10. ahus1
    added a commit that references this issue on Sep 17, 2026

    Update to FreeMarker 2.3.35

    fe10b17
  11. ahus1
    closed this as completedin #52889on Sep 17, 2026
  12. github-project-automation
    moved this from Open to Done in Keycloak Roadmapon Sep 17, 2026

  13. 8 remaining items

  14. github-actions
    added
    release/26.7.5
    release/26.6.8
    and removed
    backport/26.7
    backport/26.6
    on Sep 21, 2026
  15. keycloak-github-bot
    added
    team/continuous-delivery
    team/core-iam
    team/community
    team/core-protocols
    team/core-clients
    team/production-readiness
    team/cloud-native
    team/core-authn
    team/core-shared
    team/security
    on Sep 29, 2026
  16. tsaarni
    added a commit that references this issue on Oct 14, 2026

    Update to FreeMarker 2.3.35

    7441b95
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

kind/cveIssues identified as CVEs on third-party dependencies, or issues which Keycloak is not affectedrelease/26.4.17release/26.6.8release/26.7.5release/26.8.0team/cloud-nativeteam/communityteam/continuous-deliveryteam/core-authnteam/core-clientsteam/core-iamteam/core-protocolsteam/core-sharedteam/production-readinessteam/security

Type

cve

Fields

No fields configured for cve.

Projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions