Skip to content
OpenAdvisories

Package · npm

@keystone-6/auth

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2023-34247

    @keystone-6/auth Open Redirect vulnerability

    Keystone is a content management system for Node.JS. There is an open redirect in the `@keystone-6/auth` package versions 7.0.0 and prior, where the redirect leading `/` filter can be bypassed. Users may be redirected to domains other than the relative host, …

    keystonejs keystone @keystone-6/auth npm