hapi-auth-jwt2

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

Critical 9.8

CVE-2016-10525

Authentication Bypass in hapi-auth-jwt2

When attempting to allow authentication mode `try` in hapi, hapi-auth-jwt2 version 5.1.1 introduced an issue whereby people could bypass authentication.

HackerOne hapi-auth-jwt2 node module hapi-auth-jwt2 npm

May 29, 2018