Skip to content
OpenAdvisories

Package · npm

@sap-cloud-sdk/core

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High —
    GHSA-r2vw-jgq9-jqx2

    Improper Authorization in @sap-cloud-sdk/core

    Affected versions of `@sap-cloud-sdk/core` do not properly validate JWTs. The `verifyJwt()` function does not properly validate the URL from where the public verification key for the JWT can be downloaded. Any URL was trusted which makes it possible to provid…

    @sap-cloud-sdk/core npm