The affected products contain JSON Web Tokens (JWT) that do not expire, which could allow an attacker to gain access to the system.