Keycloak vulnerabilities