description: It was found that the Keycloak Node.js adapter 2.5 - 3.0 did not handle invalid tokens correctly.  An attacker could use this flaw to bypass authentication and gain access to restricted information, or to possibly conduct further attacks.
problem types: CWE-253
affected:
{
product: Keycloak Node.js adapter
vendor: Red Hat, Inc.
versions:
status: affected, version: 2.5 - 3.0
}