Name of the Vulnerable Software and Affected Versions Bundle versions prior to 3.7

Description The issue concerns a security problem in JSON Web Token (JWT) libraries, which can be exploited to generate trusted device cookies, effectively bypassing two-factor authentication.

Recommendations For versions prior to 3.7, update to version 3.7 or later to resolve the issue.