Red Hat Red Hat build of Keycloak 26.2.11

• CVE-2025-12150 Low 3.1 Org.keycloak/keycloak-services: webauthn attestation statement verification bypass 0.2%
• CVE-2025-13467 Medium 5.5 Org.keycloak.storage.ldap: keycloak: deserialization of untrusted data in ldap user federation 0.5%
• CVE-2025-12390 Medium 6.0 Org.keycloak.protocol.oidc.endpoints.logoutendpoint: offline session takeover due to reused authentication session id 0.1%
• CVE-2025-12110 Medium 5.4 Keycloak: org.keycloak:keycloak-services: user can refresh offline session even after client's offline_access scope was removed 0.3%
• CVE-2025-11429 Medium 5.4 Keycloak-server: too long and not settings compliant session 0.2%