HackerOne jwt-simple node module vulnerabilities
1 published CVE names HackerOne jwt-simple node module among the affected products.
- 1Published CVEs1 of them scored
- 0Last 12 monthspublished in the last year
- 0Critical0 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2016-10555
Since "algorithm" isn't enforced in jwt.decode()in jwt-simple 0.3.0 and earlier, a malicious user could choose what algorithm is sent sent to the server. If…
HackerOne · jwt-simple node module
Medium6.5