dapperduckling vulnerabilities

Products

• @dapperduckling/keycloak-connector-server 1
• keycloak-connector 1

Latest dapperduckling CVEs

Newest publication first

1. CVE-2024-53843 Reflected XSS Vulnerability in Authentication Flow URL Handling in @dapperduckling/keycloak-connector-server

   Published 2024-11-25

   High·CVSS 8.1 EPSS 0.54%

   @dapperduckling/keycloak-connector-server is an opinionated series of libraries for Node.js applications and frontend clients to interface with keycloak. A Reflected Cross-Site Scripting (XSS) vulnerability was discovered in the authentication flow of the application. This issue...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.