[FP]: FP for quarkus-keycloak-admin-resteasy-client

[kaniskavarsinipd]

Package URl

pkg:maven/io.quarkus/quarkus-keycloak-admin-resteasy-client@3.21.3

CPE

cpe:2.3:a:quarkus:quarkus:3.21.3:::::::*

CVE

CVE-2025-66560

ODC Integration

None

ODC Version

12.2.0

Description

CVE-2025-66560 not applicable for quarkus-keycloak-admin-resteasy-client,quarkus-jaxb
The vulnerable component is for quarkus-vertx-utils but here it is reported for quarkus-keycloak-admin-resteasy-client.

[github-actions]

Maven Coordinates

<dependency>
  <groupId>io.quarkus</groupId>
  <artifactId>quarkus-keycloak-admin-resteasy-client</artifactId>
  <version>3.21.3</version>
</dependency>

Suppression rule:

<suppress base="true">
    <notes><![CDATA[
    FP per issue #8291
    ]]></notes>
    <packageUrl regex="true">^pkg:maven/io\.quarkus/quarkus-keycloak-admin-resteasy-client@.*$</packageUrl>
    <cpe>cpe:/a:quarkus:quarkus</cpe>
</suppress>

Link to test results: https://github.com/dependency-check/DependencyCheck/actions/runs/21839634250

[chadlwilson]

NVD doesn't track CVEs at package level, only at product so we can't do anything about this since these are all released and versioned together.