Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
MAL-2026-10132
  • npm/react-jsonwebtoken
 Malicious code in react-jsonwebtoken (npm) 10 Jul
  • No fix available
MAL-2024-11216
  • npm/jsonwebtoken-js
 Malicious code in jsonwebtoken-js (npm) 05 Dec 2024
  • No fix available
MAL-2024-11133
  • npm/crypto-jsonwebtoken
 Malicious code in crypto-jsonwebtoken (npm) 29 Nov 2024
  • No fix available
GHSA-hjrf-2m68-5959
  • npm/jsonwebtoken
 jsonwebtoken's insecure implementation of key retrieval function could lead to Forgeable Public/Private Tokens from RSA to HMAC 22 Dec 2022
  • Fix available
  • Severity - 5.0 (Medium)
GHSA-qwph-4952-7xr6
  • npm/jsonwebtoken
 jsonwebtoken vulnerable to signature validation bypass due to insecure default algorithm in jwt.verify() 22 Dec 2022
  • Fix available
  • Severity - 6.4 (Medium)
GHSA-8cf7-32gw-wr33
  • npm/jsonwebtoken
 jsonwebtoken unrestricted key type could lead to legacy keys usage 22 Dec 2022
  • Fix available
  • Severity - 8.1 (High)
GHSA-c7hr-j4mj-j2w6
  • npm/jsonwebtoken
 Verification Bypass in jsonwebtoken 09 Oct 2018
  • Fix available