Improper Verification of Cryptographic Signature

Overview Affected versions of this package are vulnerable to Improper Verification of Cryptographic Signature via PassportHelpers.ts in the makeProfileInfo function, which fails to check the verified flag on OAuth profile emails and the emailverified claim in ID tokens before accepting them as...