Description
When attempting to allow authentication mode `try` in hapi, hapi-auth-jwt2 version 5.1.1 introduced an issue whereby people could bypass authentication.
Remediation
References
https://github.com/dwyl/hapi-auth-jwt2/issues/111
https://github.com/dwyl/hapi-auth-jwt2/pull/112
https://nodesecurity.io/advisories/81
Related Vulnerabilities
CVE-2021-36774 Vulnerability in maven package org.apache.kylin:kylin-core-common
CVE-2021-23344 Vulnerability in npm package total.js
CVE-2020-12827 Vulnerability in npm package mjml
CVE-2018-14642 Vulnerability in maven package io.undertow:undertow-core
CVE-2022-43425 Vulnerability in maven package io.jenkins.plugins:custom-checkbox-parameter