GHSA-mg8r-9g6j-hwv9CriticalCVSS 9.8

Authentication Bypass in hapi-auth-jwt2

Published
February 18, 2019
Last Modified
January 9, 2023

🔗 CVE IDs covered (1)

CVE-2016-10525 →

📋 Description

Versions of hapi-auth-jwt2 prior to version 5.1.2 are affected by a complete authentication bypass vulnerability when in the try authentication mode.

Recommendation

Update to version 5.1.2 or later.

🎯 Affected products1

  • npm/hapi-auth-jwt2:= 5.1.1

🔗 References (5)