{"action":"Upgrade hapi-auth-jwt2 to 5.1.2 or later.","affected":[{"fixed":"5.1.2","introduced":"5.1.1"}],"component":"hapi-auth-jwt2","cve_ids":["CVE-2016-10525"],"ecosystem":"npm","epss":0.02439,"exploited":false,"fixed_versions":["5.1.2"],"ghsa_id":"GHSA-mg8r-9g6j-hwv9","id":"tcs_01M5KG0N7AQEAT2YW6QEET0SEB","modified_at":"2023-11-08T03:58:10.538387Z","published_at":"2019-02-18T23:39:00Z","references":["https://osv.dev/vulnerability/GHSA-mg8r-9g6j-hwv9","https://nvd.nist.gov/vuln/detail/CVE-2016-10525","https://github.com/dwyl/hapi-auth-jwt2/issues/111","https://github.com/dwyl/hapi-auth-jwt2/pull/112","https://github.com/advisories/GHSA-mg8r-9g6j-hwv9","https://github.com/dwyl/hapi-auth-jwt2","https://www.npmjs.com/advisories/81"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-mg8r-9g6j-hwv9","url":"https://osv.dev/vulnerability/GHSA-mg8r-9g6j-hwv9"}],"summary":"Authentication Bypass in hapi-auth-jwt2"}