auth0 node-jsonwebtoken vulnerabilities
3 published CVEs name auth0 node-jsonwebtoken among the affected products.
- Published CVEs
- 3
- Last 12 months
- 0
- Critical
- 0
- Known exploited
- 0
Critical 0High 0Medium 3Low 0Not scored 0
Newest CVEs
- CVE-2022-23539
jsonwebtoken unrestricted key type could lead to legacy keys usage
auth0 · node-jsonwebtoken
Medium5.9 - CVE-2022-23540
jsonwebtoken vulnerable to signature validation bypass due to insecure default algorithm in jwt.verify()
auth0 · node-jsonwebtoken
Medium6.4 - CVE-2022-23541
jsonwebtoken's insecure implementation of key retrieval function could lead to Forgeable Public/Private Tokens from RSA to HMAC
auth0 · node-jsonwebtoken
Medium5.0