| Package | Affected versions | Patched versions |
|---|---|---|
| apisix | < 2.13.1 | 2.13.1 |
In APache APISIX before 3.13.1, the jwt-auth plugin has a security issue that leaks the user's secret key because the error message returned from the dependency lua-resty-jwt contains sensitive information.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free