~ / search / GHSA-mg8r-9g6j-hwv9

GHSA-mg8r-9g6j-hwv9

Authentication Bypass in hapi-auth-jwt2

Source: GitHub Advisory Database (reviewed) Critical CVE-2016-10525

Packages

EcosystemPackageAffectedFixed in
npm hapi-auth-jwt2 >= 5.1.1, < 5.1.2 5.1.2

Details

As written in the advisory (Markdown source, shown as plain text).

Versions of `hapi-auth-jwt2` prior to version 5.1.2 are affected by a complete authentication bypass vulnerability when in the `try` authentication mode. ## Recommendation Update to version 5.1.2 or later.

References

External links from the advisory. They lead to third-party sites.