high7.5
CVE-2019-1020015
graphql-engine (aka Hasura GraphQL Engine) before 1.0.0-beta.3 mishandles the audience check while verifying JWT.
Impact
graphql-engine (aka Hasura GraphQL Engine) before 1.0.0-beta.3 mishandles the audience check while verifying JWT.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hasura | Graphql Engine | before 1.0.0 Version 1.0.0 |