[GHSA-4vc8-pg5c-vg4x] Keycloak's improper input validation allows using email as username

[Chetven]

Updates

• Affected products

Comments
CVE Id is mentioned in GHSA-4vc8-pg5c-vg4x
But there Is no field to update it here, can it be updated to CVE-2021-3754

[github]

Hi there @abstractj! A community member has suggested an improvement to your security advisory. If approved, this change will affect the global advisory listed at github.com/advisories. It will not affect the version listed in your project repository.

This change will be reviewed by our Security Curation Team. If you have thoughts or feedback, please share them in a comment here! If this PR has already been closed, you can start a new community contribution for this advisory

[abstractj]

@Chetven thanks for submitting those changes, although I'm struggling to see the changes related to affected products. The only changes was in the date modified and adding a new line to aliases.

[Chetven]

@Chetven thanks for submitting those changes, although I'm struggling to see the changes related to affected products. The only changes was in the date modified and adding a new line to aliases.

@abstractj I wanted to update the CVE id for this GHSA, but I couldn't do that as there was no field to update the same on Vulnerability improvement form, so I left it the comments.

CVE-2021-3754 must be added in alias.