Skip to main content
cve.nowby Sazabi
← npm
npmPackage

keycloak-connect

3 known vulnerabilities (2 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
3 · 2 medium
Registry
npm

Advisories 3

  • CVE-2022-2237Medium 6.1

    A flaw was found in the Keycloak Node.js Adapter.

    Affected: fixed in 21.0.1.

  • CVE-2019-10157Medium 4.7

    It was found that Keycloak's Node.js adapter before version 4.8.3 did not properly verify the web token received from the server in its…

    Affected: fixed in 4.8.3.

  • It was found that the Keycloak Node.js adapter 2.5 - 3.0 did not handle invalid tokens correctly.

    Affected: from 2.5.0, fixed in 3.1.0.