Hapi-auth-jwt2 Node Module (Hackerone) - vulnerabilities (CVEs)
1 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2018-05-29. Vendor: Hackerone.
CVEs of Hapi-auth-jwt2 Node Module
- CVE-2016-10525 - CVSS 9.8 (critical), 2018-05-29: When attempting to allow authentication mode `try` in hapi, hapi-auth-jwt2 version 5.1.1 introduced an issue whereby people could bypass authentication.
