Vulnerabilities

All ecosystems 2242116 AlmaLinux 5975 Alpaquita 16176 Alpine 4655 Android 3708 Azure Linux 17971 BellSoft Hardened Containers 770 Bitnami 9501 Chainguard 1048512 CleanStart 5235 CRAN 14 crates.io 2763 Debian 68991 Echo 7849 GHC 3 GIT 109057 GitHub Actions 55 Go 9330 Hackage 33 Hex 365 Julia 1713 Linux 29975 Mageia 6237 Maven 7050 MinimOS 148636 npm 229216 NuGet 1869 opam 29 openEuler 8900 openSUSE 14647 OSS-Fuzz 4019 Packagist 7101 Pub 11 PyPI 25465 Red Hat 23535 Rocky Linux 4343 Root 19643 RubyGems 5369 SUSE 23455 SwiftURL 60 TuxCare 9965 Ubuntu 66087 VSCode 21 Wolfi 293807

GHSA-hjrf-2m68-5959

npm/jsonwebtoken

jsonwebtoken's insecure implementation of key retrieval function could lead to Forgeable Public/Private Tokens from RSA to HMAC 22 Dec 2022

Fix available
Severity - 5.0 (Medium)