| Package | Affected versions | Patched versions |
|---|---|---|
| graphql engine | = 1.0.0< 1.0.0 | 1.0.0 |
graphql-engine (aka Hasura GraphQL Engine) before 1.0.0-beta.3 mishandles the audience check while verifying JWT.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free