CVE PROGRAM SOURCE RECORDUnscored
CVE-2019-1020015
graphql-engine (aka Hasura GraphQL Engine) before 1.0.0-beta.3 mishandles the audience check while verifying JWT.
- Status
- Published
- Published
- Updated
- Assigning organization
- dwf
Description
graphql-engine (aka Hasura GraphQL Engine) before 1.0.0-beta.3 mishandles the audience check while verifying JWT.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
graphql-engine graphql-engine