Search by 
ezsystems/ezplatform-rest Security Advisories for v1.3.7 (1)
-
User can obtain JWT token even if account is disabled
Affected version: >=1.3.0,<1.3.8
Reported by:
GitHub