Authentication Bypass

Overview

Versions of hapi-auth-jwt2 prior to version 5.1.2 are affected by a complete authentication bypass vulnerability when in the try authentication mode.

Recommendation

Update to version 5.1.2 or later.

References

• Issue #111
• PR #112
• GitHub Advisory