keycloak-connect contains Open redirect vulnerability in the Node.js adapter

Mô tả

Tham khảo

• keycloak/keycloak-nodejs-connect security advisory · WEB
• nvd.nist.gov/vuln/detail/CVE-2022-2237 · ADVISORY
• keycloak/keycloak-nodejs-connect commit 190a947 · WEB
• bugzilla.redhat.com/show_bug.cgi · WEB
• keycloak/keycloak-nodejs-connect · PACKAGE

Lỗ hổng khác của single sign-on

• CVE-2026-16102CAO 8.1A flaw was found in the Dynamic Client Registration (DCR) component of Keycloak, an identity and access management solution. The default DCR…
• CVE-2026-15573CAO 8.1A flaw was found in Keycloak's Authorization Services. The component responsible for matching request paths to security policies (PathMatche…
• CVE-2026-16093TRUNG BÌNH 5.4Keycloak provides a mechanism called Client Policies to enforce security requirements on clients, such as requiring them to use signed JWTs …
• CVE-2026-15945THẤP 2.7A flaw was found in the group search functionality of the Keycloak server's administrative API. When Fine-Grained Admin Permissions (FGAP) v…
• CVE-2026-49875NGHIÊM TRỌNG 9.8Apache CXF's EndpointReferenceUtils and W3CMultiSchemaFactory classes construct a SAXParserFactory without the necessary JAXP hardening conf…