github_osv/GHSA-v66p-w7qx-wv98
Authentication Bypass in express-laravel-passport
All versions of `express-laravel-passport` are vulnerable to an Authentication Bypass. The package fails to properly validate JWTs, allowing attackers to send HTTP requests impersonating other users.
## Recommendation
Upgrade to version 2.0.5 or later.
gitlab/npm/express-laravel-passport/GMS-2020-255
Authentication Bypass in express-laravel-passport
All versions of `express-laravel-passport` are vulnerable to an Authentication Bypass. The package fails to properly validate JWTs, allowing attackers to send HTTP requests impersonating other users. Upgrade to or later.