Description
graphql-engine (aka Hasura GraphQL Engine) before 1.0.0-beta.3 mishandles the audience check while verifying JWT.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| graphql-engine | graphql-engine | < 1.0.0-beta.3 | — |
Unscored
CVE-2019-1020015
EUVD-2019-2061GHSA-xgqc-x32m-2j5c
graphql-engine (aka Hasura GraphQL Engine) before 1.0.0-beta.3 mishandles the audience check while verifying JWT.
Published Jul 29, 2019 · Updated Aug 5, 2024 · Assigned by dwf