Keycloak-services: keycloak-services: keycloak: fgap v2 role groups endpoint discloses hidden group metadata without group view permission (CVE-2026-14613) | HOL Guard CVE