CVE-2022-3102

GHSA-gwp4-mcv4-w95j

jwcrypto token substitution can lead to authentication bypass