CVE-2016-10525
1 advisory.
npm/hapi-auth-jwt2 CVE-2016-10525: critical 9.8, EPSS 2.48%
Authentication Bypass in hapi-auth-jwt2
Action: Upgrade hapi-auth-jwt2 to 5.1.2 or later.
npm i hapi-auth-jwt2@5.1.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.1.1 | 5.1.2 | - |
Fixed versions
| 5.1.2 |
Sources
- osv: GHSA-mg8r-9g6j-hwv9
- https://nvd.nist.gov/vuln/detail/CVE-2016-10525
- https://github.com/dwyl/hapi-auth-jwt2/issues/111
- https://github.com/dwyl/hapi-auth-jwt2/pull/112
- https://github.com/advisories/GHSA-mg8r-9g6j-hwv9
- https://github.com/dwyl/hapi-auth-jwt2
- https://www.npmjs.com/advisories/81
CVE-2016-10525 · published · modified · JSON