Vulnerabilities affecting this package (0)
Vulnerability |
Summary |
Fixed by |
This package is not known to be affected by vulnerabilities.
|
Vulnerabilities fixed by this package (1)
Vulnerability |
Summary |
Aliases |
VCID-733r-y5bp-aaae
|
High severity vulnerability that affects keycloak-connect and keycloak-js
It was found that the Keycloak Node.js adapter - did not handle invalid tokens correctly. An attacker could use this flaw to bypass authentication and gain access to restricted information, or to possibly conduct further attacks.
|
CVE-2017-7474
GHSA-mw35-24gh-f82w
|