| Package | Affected versions | Patched versions |
|---|---|---|
| hapi-auth-jwt2 | ≤ 5.1.1 | |
| hapi-auth-jwt2 | ≥ 5.1.1, < 5.1.2 | 5.1.2 |
Versions of hapi-auth-jwt2 prior to version 5.1.2 are affected by a complete authentication bypass vulnerability when in the try authentication mode.
Update to version 5.1.2 or later.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free