CVE-2014-3652

JBoss KeyCloak: Open redirect vulnerability via failure to validate the redirect URL...

CVE-2014-3656

JBoss KeyCloak: XSS in login-status-iframe.html...

CVE-2014-3655

JBoss KeyCloak is vulnerable to soft token deletion via CSRF...

gadgetfinder (>=0.0.1 <=1.0.0), keystone-keycloak-backend (=0.1.1) +2 more potentially affected by CVE-2012-3542 via keystone (=29.0.1)

keystone PYPI version =29.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on keystone and may be impacted: - gadgetfinder =0.0.1, =0.1.0, =0.1.0, =1.12.0 Source cves: CVE-2012-3542 Source advisory: OSV:PYSEC-2012-19...