Vulnerability Database
Blog
FAQ
Docs
arrow_forward
search
light_mode
dark_mode
Vulnerabilities
search
All ecosystems
2200288
AlmaLinux
5928
Alpaquita
15755
Alpine
4608
Android
3677
Azure Linux
17638
BellSoft Hardened Containers
746
Bitnami
9292
Chainguard
1023905
CleanStart
3591
CRAN
14
crates.io
2734
Debian
68402
Echo
7425
GHC
3
GIT
108138
GitHub Actions
55
Go
9243
Hackage
32
Hex
364
Julia
1713
Linux
29974
Mageia
6231
Maven
7044
MinimOS
144508
npm
228783
NuGet
1869
opam
29
openEuler
8800
openSUSE
14455
OSS-Fuzz
4013
Packagist
7095
Pub
11
PyPI
25172
Red Hat
23355
Rocky Linux
4300
Root
19561
RubyGems
5326
SUSE
23214
SwiftURL
60
TuxCare
9552
Ubuntu
65385
VSCode
21
Wolfi
288267
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-869p-cjfg-cm3x
npm/jws
auth0/node-jws Improperly Verifies HMAC Signature
04 Dec 2025
Fix available
Severity - 7.5 (High)
GHSA-gjcw-v447-2w7q
npm/jws
Forgeable Public/Private Tokens in jws
01 Sep 2020
Fix available
Severity - 8.7 (High)
npm - OSV
