Search for packages
purl | pkg:npm/keycloak-auth-utils@2.5.1 |
Next non-vulnerable version | 3.0.0-cr.1 |
Latest non-vulnerable version | 3.1.0 |
Risk | 4.5 |
Vulnerability | Summary | Fixed by |
---|---|---|
VCID-733r-y5bp-aaae
Aliases: CVE-2017-7474 GHSA-mw35-24gh-f82w |
High severity vulnerability that affects keycloak-connect and keycloak-js It was found that the Keycloak Node.js adapter - did not handle invalid tokens correctly. An attacker could use this flaw to bypass authentication and gain access to restricted information, or to possibly conduct further attacks. |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
Vulnerability | Summary | Aliases |
---|---|---|
This package is not known to fix vulnerabilities. |