jsonwebtoken vulnerabilities (npm)
4 vulnerabilities.
-
jsonwebtokennpm jsonwebtoken's insecure implementation of key retrieval function could lead to Forgeable Public/Private Tokens from RSA to HMAC 5.0 Medium -
jsonwebtokennpm jsonwebtoken unrestricted key type could lead to legacy keys usage 5.9 Medium -
jsonwebtokennpm jsonwebtoken vulnerable to signature validation bypass due to insecure default algorithm in jwt.verify() 6.4 Medium -
jsonwebtokennpm Verification Bypass in jsonwebtoken 9.8 Critical