PT-2020-14172 · Auth0 · Express-Jwt +1

Name of the Vulnerable Software and Affected Versions: express-jwt versions 5.3.3 and earlier Description: The issue arises when the algorithms entry is not specified in the configuration, potentially leading to authorization bypass when used with libraries like jwks-rsa as the secret. This occur...