@fastify/jwt vulnerabilities
3 published CVEs name @fastify/jwt among the affected products.
- 3Published CVEs3 of them scored
- 3Last 12 monthspublished in the last year
- 0Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-110024
@fastify/jwt vulnerable to missing token expiration when per-call options drop global defaults
@fastify/jwt · @fastify/jwt
Medium6.8 - CVE-2026-107275
@fastify/jwt vulnerable to missing token expiration when temporal options cannot be parsed
@fastify/jwt · @fastify/jwt
Medium6.8 - CVE-2026-18500
@fastify/jwt vulnerable to authorization bypass via global secret overriding the per-request key
@fastify/jwt · @fastify/jwt
High8.1