Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2019-1020015
Description
graphql-engine (aka Hasura GraphQL Engine) before 1.0.0-beta.3 mishandles the audience check while verifying JWT.
hasura/graphql-engine
GitHubBlazing fast, instant realtime GraphQL APIs on all your data with fine grained access control, also trigger webhooks on database events.
GitHubBlazing fast, instant realtime GraphQL APIs on all your data with fine grained access control, also trigger webhooks on database events.= 1.0.0, < 1.0.0NVD