Auth0 Node-jsonwebtoken vulnerabilities
- auth0 jsonwebtoken, node-jsonwebtoken +1 more jsonwebtoken's insecure implementation of key retrieval function could lead to Forgeable Public/Private Tokens from RSA to HMAC 5.0 Medium
- auth0 jsonwebtoken, node-jsonwebtoken +1 more jsonwebtoken unrestricted key type could lead to legacy keys usage 5.9 Medium
- auth0 jsonwebtoken, node-jsonwebtoken +1 more jsonwebtoken vulnerable to signature validation bypass due to insecure default algorithm in jwt.verify() 6.4 Medium