H/I:L/A:N>AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N</a></li></ul></li></ul><p>You are subject to the vulnerability if you are using <code>RequestAuthentication</code> alone for JWT validation.</p><p>You are <strong>not</strong> subject to the vulnerability if you use <strong>both</strong> <code>RequestAuthentication</code> and <code>AuthorizationPolicy</code> for JWT validation.</p><div><aside class="callout warning"><div class=type><svg class="large-icon"><use xlink:href="/v1.11/img/icons.svg#callout-warning"/><