Skip to content
OpenAdvisories

Package · npm

keycloak-js

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.8
    CVE-2017-7474

    keycloak-connect and keycloak-js improperly handle invalid tokens

    It was found that the Keycloak Node.js adapter 2.5 - 3.0 did not handle invalid tokens correctly. An attacker could use this flaw to bypass authentication and gain access to restricted information, or to possibly conduct further attacks.

    Red Hat Keycloak Node.js adapter keycloak-connect keycloak-js npm