Search for packages
purl | pkg:maven/org.keycloak/keycloak-server-spi-private@21.0.0 |
Vulnerability | Summary | Fixed by |
---|---|---|
VCID-caef-7bbm-aaaa
Aliases: CVE-2023-2585 GHSA-f5h4-wmp5-xhg6 |
Client Spoofing within the Keycloak Device Authorisation Grant |
Affected by 1 other vulnerability. |
VCID-kfzc-yxas-aaad
Aliases: CVE-2023-6291 GHSA-mpwq-j3xf-7m5w |
The redirect_uri validation logic allows for bypassing explicitly allowed hosts that would otherwise be restricted |
Affected by 0 other vulnerabilities. |
Vulnerability | Summary | Aliases |
---|---|---|
This package is not known to fix vulnerabilities. |