Search for packages
Package details: pkg:npm/keycloak-auth-utils@2.5.0
purl pkg:npm/keycloak-auth-utils@2.5.0
Next non-vulnerable version 3.0.0-cr.1
Latest non-vulnerable version 3.1.0
Risk 4.5
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-733r-y5bp-aaae
Aliases:
CVE-2017-7474
GHSA-mw35-24gh-f82w
High severity vulnerability that affects keycloak-connect and keycloak-js It was found that the Keycloak Node.js adapter - did not handle invalid tokens correctly. An attacker could use this flaw to bypass authentication and gain access to restricted information, or to possibly conduct further attacks.
3.0.0-cr.1
Affected by 0 other vulnerabilities.
3.1.0-cr.1
Affected by 0 other vulnerabilities.
3.1.0
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-06-20T13:54:14.229535+00:00 GitLab Importer Affected by VCID-733r-y5bp-aaae https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/keycloak-auth-utils/CVE-2017-7474.yml 36.1.3
2025-06-20T13:54:13.411031+00:00 GitLab Importer Affected by VCID-733r-y5bp-aaae None 36.1.3
2025-06-03T20:46:06.570765+00:00 GitLab Importer Affected by VCID-733r-y5bp-aaae https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/keycloak-auth-utils/CVE-2017-7474.yml 36.1.0
2025-06-03T20:46:05.671037+00:00 GitLab Importer Affected by VCID-733r-y5bp-aaae None 36.1.0
2025-06-02T20:25:43.349258+00:00 GitLab Importer Affected by VCID-733r-y5bp-aaae https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/keycloak-auth-utils/CVE-2017-7474.yml 36.1.2
2025-06-02T20:25:42.568815+00:00 GitLab Importer Affected by VCID-733r-y5bp-aaae None 36.1.2
2025-04-03T16:38:42.336725+00:00 GitLab Importer Affected by VCID-733r-y5bp-aaae https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/keycloak-auth-utils/CVE-2017-7474.yml 36.0.0
2025-04-03T16:38:41.689092+00:00 GitLab Importer Affected by VCID-733r-y5bp-aaae None 36.0.0
2025-02-17T22:47:13.518007+00:00 GitLab Importer Affected by VCID-733r-y5bp-aaae https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/keycloak-auth-utils/CVE-2017-7474.yml 35.1.0
2025-02-17T22:47:13.390920+00:00 GitLab Importer Affected by VCID-733r-y5bp-aaae None 35.1.0
2024-11-20T22:11:28.046366+00:00 GitLab Importer Affected by VCID-733r-y5bp-aaae https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/keycloak-auth-utils/CVE-2017-7474.yml 35.0.0
2024-11-18T22:07:29.248666+00:00 GitLab Importer Affected by VCID-733r-y5bp-aaae https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/keycloak-auth-utils/CVE-2017-7474.yml 34.3.2
2024-10-07T23:07:42.599847+00:00 GitLab Importer Affected by VCID-733r-y5bp-aaae https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/keycloak-auth-utils/CVE-2017-7474.yml 34.0.2
2024-09-17T22:43:58.404516+00:00 GitLab Importer Affected by VCID-733r-y5bp-aaae https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/keycloak-auth-utils/CVE-2017-7474.yml 34.0.1
2024-04-24T01:15:10.353466+00:00 GitLab Importer Affected by VCID-733r-y5bp-aaae https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/keycloak-auth-utils/CVE-2017-7474.yml 34.0.0rc4
2024-04-24T01:15:10.208248+00:00 GitLab Importer Affected by VCID-733r-y5bp-aaae None 34.0.0rc4
2024-01-10T03:44:01.358008+00:00 GitLab Importer Affected by VCID-733r-y5bp-aaae https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/keycloak-auth-utils/CVE-2017-7474.yml 34.0.0rc2
2024-01-10T03:44:00.480226+00:00 GitLab Importer Affected by VCID-733r-y5bp-aaae None 34.0.0rc2
2024-01-03T20:20:49.108678+00:00 GitLab Importer Affected by VCID-733r-y5bp-aaae None 34.0.0rc1
2024-01-03T18:05:45.442413+00:00 GitLab Importer Affected by VCID-733r-y5bp-aaae https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/keycloak-auth-utils/CVE-2017-7474.yml 34.0.0rc1