@rootio/jsonwebtoken vulnerabilities (Root)

6 vulnerabilities.

• @rootio/jsonwebtoken Root jsonwebtoken's insecure implementation of key retrieval function could lead to Forgeable Public/Private Tokens from RSA to HMAC CVE-2022-23541 Fix available 5.0 MediumDecember 22, 2022
• @rootio/jsonwebtoken Root jsonwebtoken unrestricted key type could lead to legacy keys usage CVE-2022-23539 Fix available 5.9 MediumDecember 22, 2022
• @rootio/jsonwebtoken Root jsonwebtoken has insecure input validation in jwt.verify function CVE-2022-23529 Public exploitFix availableRejected 7.6 HighDecember 21, 2022
• @rootio/jsonwebtoken Root jsonwebtoken vulnerable to signature validation bypass due to insecure default algorithm in jwt.verify() CVE-2022-23540 Fix available 6.4 MediumSeptember 2, 2020
• @rootio/jsonwebtoken Root Verification Bypass in jsonwebtoken CVE-2015-9235 Public exploitFix available 9.8 CriticalMay 29, 2018
• @rootio/jsonwebtoken Root The client in iPass Open Mobile before 2.4.5 on Windows allows remote authenticated users to... CVE-2015-0925 Public exploitFix available EPSS 52.2% 9.0 HighJanuary 22, 2015