https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-20T18:24:36.564323+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2018-20987 cnvd-2018-20987 2026-10-20T18:24:36.646461+00:00 cnvd-2018-20987 https://cve.radiocsirt.org/vuln/euvd-2026-179198 EUVD-2026-179198 2026-10-20T18:24:36.646498+00:00 EUVD-2026-179198 https://cve.radiocsirt.org/vuln/fkie_cve-2016-10525 fkie_cve-2016-10525 2026-10-20T18:24:36.646513+00:00

When attempting to allow authentication mode `try` in hapi, hapi-auth-jwt2 version 5.1.1 introduced an issue whereby people could bypass authentication.

 https://cve.radiocsirt.org/vuln/ghsa-mg8r-9g6j-hwv9 GHSA-mg8r-9g6j-hwv9 — Authentication Bypass in hapi-auth-jwt2 2026-10-20T18:24:36.646541+00:00

Affected: npm: hapi-auth-jwt2

Versions of `hapi-auth-jwt2` prior to version 5.1.2 are affected by a complete authentication bypass vulnerability when in the `try` authentication mode.

## Recommendation

Update to version 5.1.2 or later.

 https://cve.radiocsirt.org/vuln/gsd-2016-10525 gsd-2016-10525 2026-10-20T18:24:36.646567+00:00 gsd-2016-10525