Description
When attempting to allow authentication mode `try` in hapi, hapi-auth-jwt2 version 5.1.1 introduced an issue whereby people could bypass authentication.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| HackerOne | hapi-auth-jwt2 node module | 5.1.1 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | hapi-auth-jwt2 | >= 5.1.1, < 5.1.2 | 5.1.2 | GHSA-mg8r-9g6j-hwv9 |