Site icon API Security Blog

GO-2022-1178

Errors returned by ghinstallation.Transport can include the JWT used for the failed operation. If the error is exposed to an untrusted party, this JWT could be extracted and used to authenticate further requests.Read More

Exit mobile version