Skip to content
OpenAdvisories

Product · auth0

express-jwt

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.7
    CVE-2020-15084

    Authorization bypass in express-jwt

    In express-jwt (NPM package) up and including version 5.3.3, the algorithms entry to be specified in the configuration is not being enforced. When algorithms is not specified in the configuration, with the combination of jwks-rsa, it may lead to authorization…

    auth0 express-jwt express-jwt npm