Description (CNA)
graphql-engine (aka Hasura GraphQL Engine) before 1.0.0-beta.3 mishandles the audience check while verifying JWT.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| graphql-engine / graphql-engine | affected < 1.0.0-beta.3 |
CWE
No CWE identifiers supplied.
References
ADP enrichment
No English description supplied.