Search for packages
| purl | pkg:npm/keycloak-auth-utils@2.5.7 |
| Tags | Ghost |
| Next non-vulnerable version | 3.0.0-cr.1 |
| Latest non-vulnerable version | 3.1.0 |
| Risk | 4.5 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-733r-y5bp-aaae
Aliases: CVE-2017-7474 GHSA-mw35-24gh-f82w |
High severity vulnerability that affects keycloak-connect and keycloak-js It was found that the Keycloak Node.js adapter - did not handle invalid tokens correctly. An attacker could use this flaw to bypass authentication and gain access to restricted information, or to possibly conduct further attacks. |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2024-09-17T22:43:58.409467+00:00 | GitLab Importer | Affected by | VCID-733r-y5bp-aaae | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/keycloak-auth-utils/CVE-2017-7474.yml | 34.0.1 |
| 2024-01-03T18:05:45.447229+00:00 | GitLab Importer | Affected by | VCID-733r-y5bp-aaae | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/keycloak-auth-utils/CVE-2017-7474.yml | 34.0.0rc1 |