json-web-token vulnerabilities

CVEs whose affected-version data names the json-web-token package (npm). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2023-48238High· 7.5

json-web-token library is vulnerable to a JWT algorithm confusion attack

json-web-token library is vulnerable to a JWT algorithm confusion attack

▾ Twilightjson-web-token · json-web-tokenEPSS 0.32%via GHSA

json-web-token vulnerabilities (CVEs) · VulnSea