Skip to content
OpenAdvisories

Package · npm

passport-cognito

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical —
    CVE-2019-19723

    Improper Authorization in passport-cognito

    All versions of `passport-cognito` are vulnerable to Improper Authorization. The package fails to properly scope the variables containing authorization information, such as access token, refresh token and ID token. This causes a race condition where simultane…

    passport-cognito npm