{"action":"Upgrade @dapperduckling/keycloak-connector-server to 2.5.5 or later.","affected":[{"fixed":"2.5.5","introduced":"0"}],"component":"@dapperduckling/keycloak-connector-server","cve_ids":["CVE-2024-53843"],"ecosystem":"npm","epss":0.00508,"exploited":false,"fixed_versions":["2.5.5"],"ghsa_id":"GHSA-w5rq-g9r6-vrcg","id":"tcs_01M5KGE33W4NFE49V79M1XGVCD","modified_at":"2024-11-26T17:27:29.633358Z","published_at":"2024-11-26T16:51:05Z","references":["https://osv.dev/vulnerability/GHSA-w5rq-g9r6-vrcg","https://github.com/DapperDuckling/keycloak-connector/security/advisories/GHSA-w5rq-g9r6-vrcg","https://nvd.nist.gov/vuln/detail/CVE-2024-53843","https://github.com/DapperDuckling/keycloak-connector"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-w5rq-g9r6-vrcg","url":"https://osv.dev/vulnerability/GHSA-w5rq-g9r6-vrcg"}],"summary":"@dapperduckling/keycloak-connector-server has Reflected XSS Vulnerability in Authentication Flow URL Handling"}