{"source":1090200,"name":"express-jwt","dependency":"express-jwt","title":"Authorization bypass in express-jwt","url":"https://github.com/advisories/GHSA-6g6m-m6h5-w9gf","severity":"high","versions":["0.1.0","0.1.1","0.1.2","0.1.3","0.1.4","0.2.0","0.2.1","0.2.2","0.3.0","0.3.1","0.3.2","0.4.0","0.5.0","0.5.1","0.6.1","0.6.2","1.0.0","1.1.0","1.2.0","1.3.0","1.3.1","1.4.0","2.0.0","2.0.1","2.1.0","3.0.0","3.0.1","3.1.0","3.2.0","3.3.0","3.4.0","5.0.0","5.1.0","5.3.0","5.3.1","5.3.2","5.3.3","6.0.0","6.1.0","6.1.1","6.1.2","7.0.0","7.1.0","7.2.0","7.3.0","7.4.0","7.4.1","7.4.2","7.4.3","7.5.0","7.5.1","7.5.2","7.6.0","7.6.1","7.6.2","7.7.0","7.7.1","7.7.2","7.7.3","7.7.4","7.7.5","7.7.6","7.7.7","7.7.8","8.0.0","8.1.0","8.2.0","8.2.1","8.3.0","8.4.0","8.4.1","8.5.0","8.5.1"],"vulnerableVersions":["0.1.0","0.1.1","0.1.2","0.1.3","0.1.4","0.2.0","0.2.1","0.2.2","0.3.0","0.3.1","0.3.2","0.4.0","0.5.0","0.5.1","0.6.1","0.6.2","1.0.0","1.1.0","1.2.0","1.3.0","1.3.1","1.4.0","2.0.0","2.0.1","2.1.0","3.0.0","3.0.1","3.1.0","3.2.0","3.3.0","3.4.0","5.0.0","5.1.0","5.3.0","5.3.1","5.3.2","5.3.3"],"cwe":["CWE-285","CWE-863"],"cvss":{"score":7.7,"vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N"},"range":"<=5.3.3","id":"4NuDWOuuoMLs61CVMCeHPRGvuLEwPQ8Jl+CpBp3SG3Nz4i2QUHViTnTkvGMqE6RCWPN096JpksfkR5T8kE1dRQ=="}