Search for packages
Package details: pkg:npm/keycloak-js@2.5.0
purl pkg:npm/keycloak-js@2.5.0
Next non-vulnerable version 3.1.0
Latest non-vulnerable version 3.1.0
Risk 4.5
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-733r-y5bp-aaae
Aliases:
CVE-2017-7474
GHSA-mw35-24gh-f82w
High severity vulnerability that affects keycloak-connect and keycloak-js It was found that the Keycloak Node.js adapter - did not handle invalid tokens correctly. An attacker could use this flaw to bypass authentication and gain access to restricted information, or to possibly conduct further attacks.
3.1.0
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-06-20T13:58:49.595663+00:00 GitLab Importer Affected by VCID-733r-y5bp-aaae https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/keycloak-js/CVE-2017-7474.yml 36.1.3
2025-06-20T13:58:49.518106+00:00 GitLab Importer Affected by VCID-733r-y5bp-aaae None 36.1.3
2025-06-03T20:50:43.750925+00:00 GitLab Importer Affected by VCID-733r-y5bp-aaae https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/keycloak-js/CVE-2017-7474.yml 36.1.0
2025-06-03T20:50:43.656305+00:00 GitLab Importer Affected by VCID-733r-y5bp-aaae None 36.1.0
2025-06-02T20:30:27.887406+00:00 GitLab Importer Affected by VCID-733r-y5bp-aaae https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/keycloak-js/CVE-2017-7474.yml 36.1.2
2025-06-02T20:30:27.741676+00:00 GitLab Importer Affected by VCID-733r-y5bp-aaae None 36.1.2
2025-04-03T16:45:41.832526+00:00 GitLab Importer Affected by VCID-733r-y5bp-aaae https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/keycloak-js/CVE-2017-7474.yml 36.0.0
2025-04-03T16:45:41.675811+00:00 GitLab Importer Affected by VCID-733r-y5bp-aaae None 36.0.0
2025-02-18T06:59:39.130132+00:00 GitLab Importer Affected by VCID-733r-y5bp-aaae None 35.1.0
2025-02-18T06:59:38.843072+00:00 GitLab Importer Affected by VCID-733r-y5bp-aaae https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/keycloak-js/CVE-2017-7474.yml 35.1.0
2025-01-17T02:30:51.978810+00:00 GHSA Importer Affected by VCID-733r-y5bp-aaae None 35.1.0
2024-11-21T02:49:16.476069+00:00 GitLab Importer Affected by VCID-733r-y5bp-aaae https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/keycloak-js/CVE-2017-7474.yml 35.0.0
2024-11-19T02:32:25.743458+00:00 GitLab Importer Affected by VCID-733r-y5bp-aaae https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/keycloak-js/CVE-2017-7474.yml 34.3.2
2024-10-08T03:07:30.837146+00:00 GitLab Importer Affected by VCID-733r-y5bp-aaae https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/keycloak-js/CVE-2017-7474.yml 34.0.2
2024-10-07T17:28:15.728333+00:00 GHSA Importer Affected by VCID-733r-y5bp-aaae https://github.com/advisories/GHSA-mw35-24gh-f82w 34.0.2
2024-09-17T22:43:29.695300+00:00 GitLab Importer Affected by VCID-733r-y5bp-aaae https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/keycloak-js/CVE-2017-7474.yml 34.0.1
2024-09-17T22:18:51.977873+00:00 GHSA Importer Affected by VCID-733r-y5bp-aaae https://github.com/advisories/GHSA-mw35-24gh-f82w 34.0.1
2024-04-24T05:39:47.407411+00:00 GitLab Importer Affected by VCID-733r-y5bp-aaae https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/keycloak-js/CVE-2017-7474.yml 34.0.0rc4
2024-04-24T05:39:47.050537+00:00 GitLab Importer Affected by VCID-733r-y5bp-aaae None 34.0.0rc4
2024-04-23T18:50:48.345226+00:00 GHSA Importer Affected by VCID-733r-y5bp-aaae https://github.com/advisories/GHSA-mw35-24gh-f82w 34.0.0rc4
2024-04-23T18:50:47.837489+00:00 GHSA Importer Affected by VCID-733r-y5bp-aaae None 34.0.0rc4
2024-01-10T08:11:32.846398+00:00 GitLab Importer Affected by VCID-733r-y5bp-aaae https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/keycloak-js/CVE-2017-7474.yml 34.0.0rc2
2024-01-10T08:11:31.829344+00:00 GitLab Importer Affected by VCID-733r-y5bp-aaae None 34.0.0rc2
2024-01-09T20:43:53.874779+00:00 GHSA Importer Affected by VCID-733r-y5bp-aaae https://github.com/advisories/GHSA-mw35-24gh-f82w 34.0.0rc2
2024-01-09T20:43:53.352831+00:00 GHSA Importer Affected by VCID-733r-y5bp-aaae None 34.0.0rc2
2024-01-04T00:56:54.023109+00:00 GitLab Importer Affected by VCID-733r-y5bp-aaae None 34.0.0rc1
2024-01-03T18:05:21.861518+00:00 GitLab Importer Affected by VCID-733r-y5bp-aaae https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/keycloak-js/CVE-2017-7474.yml 34.0.0rc1
2024-01-03T17:47:57.816292+00:00 GHSA Importer Affected by VCID-733r-y5bp-aaae https://github.com/advisories/GHSA-mw35-24gh-f82w 34.0.0rc1
2024-01-03T15:57:17.627399+00:00 GHSA Importer Affected by VCID-733r-y5bp-aaae None 34.0.0rc1