CVE-2022-2237: keycloak-connect contains Open redirect vulnerability in the Node.js adapter

The commit diff shows the vulnerability was in the URL formatting logic within check-sso.js. The unpatched code used URL.format(urlParts) to construct redirect URLs, which preserved multiple leading slashes. This allowed relative URLs starting with '//' to bypass security checks and redirect to external domains. The patch explicitly addresses this by adding a regex replacement (replace(/^/+/, '/')) to collapse leading slashes, confirming this was the vulnerable code path. The CWE-601 classification and advisory descriptions directly match this URL validation flaw in the checkSSO flow.