Lucene search
+L

9 matches found

EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2019-0315

Malware in sbrugna...

9.8CVSS9.4AI score0.02485EPSS
SaveExploits0References8
Github Security Blog
Github Security Blog
•added 2019/02/18 11:39 p.m.•36 views

Authentication Bypass in hapi-auth-jwt2

Versions of hapi-auth-jwt2 prior to version 5.1.2 are affected by a complete authentication bypass vulnerability when in the try authentication mode. Recommendation Update to version 5.1.2 or later...

9.8CVSS5.6AI score0.02485EPSS
SaveExploits0References5Affected Software1
OSV
OSV
•added 2019/02/18 11:39 p.m.•43 views

GHSA-MG8R-9G6J-HWV9 Authentication Bypass in hapi-auth-jwt2

Versions of hapi-auth-jwt2 prior to version 5.1.2 are affected by a complete authentication bypass vulnerability when in the try authentication mode. Recommendation Update to version 5.1.2 or later...

9.8CVSS9.6AI score0.02485EPSS
SaveExploits0References6
CNVD
CNVD
•added 2018/06/11 12:00 a.m.•21 views

Unspecified vulnerability in hapi-auth-jwt2

hapi-auth-jwt2 is a module that supports authentication using JSON Web Tokens JWT in Hapi.js web applications. A security vulnerability exists in hapi-auth-jwt2 version 5.1.1. An attacker can exploit the vulnerability to bypass authentication...

9.8CVSS9.5AI score0.02485EPSS
SaveExploits0References1
CVE
CVE
•added 2018/05/29 8:00 p.m.•68 views

CVE-2016-10525

Affects hapi-auth-jwt2 prior to 5.1.2: in try authentication mode, an authentication bypass vulnerability exists, enabling bypass of auth checks. Impact described as complete bypass with high severity; fix is to upgrade to 5.1.2 or later. Documents from GHSA and npm advisory confirm vulnerability...

9.8CVSS9.5AI score0.02485EPSS
SaveExploits0References3Affected Software1
Mend
Mend
•added 2018/05/29 8:00 p.m.•3 views

CVE-2016-10525

When attempting to allow authentication mode "try" in hapi, hapi-auth-jwt2 version 5.1.1 introduced an issue whereby people could bypass authentication...

9.8CVSS0.02485EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/05/29 12:00 a.m.•6 views

CVE-2016-10525: Improper Authentication

When attempting to allow authentication mode try in hapi, hapi-auth-jwt2 version 5.1.1 introduced an issue whereby people could bypass authentication...

9.8CVSS8.3AI score0.02485EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2018/05/29 12:00 a.m.•4 views

PT-2018-4705

Name of the Vulnerable Software and Affected Versions hapi-auth-jwt2 versions prior to 5.1.2 Description The issue allows for a complete authentication bypass when in the try authentication mode. This means that individuals could bypass the authentication process. Recommendations Update to versio...

9.8CVSS0.02485EPSS
SaveExploits0References9
nodejs
nodejs
•added 2016/01/28 7:56 a.m.•46 views

Authentication Bypass

Overview Versions of hapi-auth-jwt2 prior to version 5.1.2 are affected by a complete authentication bypass vulnerability when in the try authentication mode. Recommendation Update to version 5.1.2 or later. References - Issue 111 - PR 112 - GitHub Advisory...

7.5CVSS6.1AI score0.02485EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder