Cross Site Scripting

@dapperduckling/keycloak-connector-server is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to improper sanitization of URL parameters, allowing crafted malicious content to be injected and reflected into the HTML page...

CVE-2021-4058

Heap buffer overflow in ANGLE in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...