{"action":"Upgrade keycloak-connect to 21.0.1 or later.","affected":[{"fixed":"21.0.1","introduced":"0"}],"component":"keycloak-connect","cve_ids":["CVE-2022-2237"],"ecosystem":"npm","epss":0.00399,"exploited":false,"fixed_versions":["21.0.1"],"ghsa_id":"GHSA-59fq-727j-hm3f","id":"tcs_01M5KF37D808HRPVPZEJQRFM32","modified_at":"2023-11-08T04:08:12.422193Z","published_at":"2023-03-02T23:21:02Z","references":["https://osv.dev/vulnerability/GHSA-59fq-727j-hm3f","https://github.com/keycloak/keycloak-nodejs-connect/security/advisories/GHSA-59fq-727j-hm3f","https://nvd.nist.gov/vuln/detail/CVE-2022-2237","https://github.com/keycloak/keycloak-nodejs-connect/commit/190a9470e234bbd9ac5d5de43f5a19aead9a2c21","https://bugzilla.redhat.com/show_bug.cgi?id=2097007","https://github.com/keycloak/keycloak-nodejs-connect"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-59fq-727j-hm3f","url":"https://osv.dev/vulnerability/GHSA-59fq-727j-hm3f"}],"summary":"keycloak-connect contains Open redirect vulnerability in the Node.js adapter"}