Improper Authentication
When attempting to allow authentication mode try in hapi, hapi-auth-jwt2 version 5.1.1 introduced an issue whereby people could bypass authentication.
Advisories for Npm/Hapi-Auth-Jwt2 package
2019
2016
Authentication Bypass in Try Mode
When attempting to allow authentication mode try in hapi, Hapi introduced an issue whereby people can bypass authentication.