Skip to content
OpenAdvisories

Package · npm

@keystone-6/auth

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 6.1
    CVE-2023-34247

    @keystone-6/auth Open Redirect vulnerability

    Keystone is a content management system for Node.JS. There is an open redirect in the `@keystone-6/auth` package versions 7.0.0 and prior, where the redirect leading `/` filter can be bypassed. Users may be redirected to domains other than the relative host, …

    keystonejs keystone @keystone-6/auth npm
  • High 7.1
    CVE-2022-0087 Scanner template

    Cross-site Scripting (XSS) - Reflected in keystonejs/keystone

    keystone is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

    keystonejs keystonejs/keystone @keystone-6/auth @keystone-next/auth npm