CVE-2020-15084
1 advisory.
npm/express-jwt CVE-2020-15084: high 7.7, EPSS 1.22%
Authorization bypass in express-jwt
Action: Upgrade express-jwt to 6.0.0 or later.
npm i express-jwt@6.0.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 6.0.0 | - |
Fixed versions
| 6.0.0 |
Sources
- osv: GHSA-6g6m-m6h5-w9gf
- https://github.com/auth0/express-jwt/security/advisories/GHSA-6g6m-m6h5-w9gf
- https://nvd.nist.gov/vuln/detail/CVE-2020-15084
- https://github.com/auth0/express-jwt/commit/7ecab5f8f0cab5297c2b863596566eb0c019cdef
CVE-2020-15084 · published · modified · JSON