jwt vulnerabilities
2 published CVEs name jwt among the affected products.
- 2Published CVEs2 of them scored
- 1Last 12 monthspublished in the last year
- 2Critical0 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-45363
`jwt` (Ruby gem) - empty-key HMAC bypass
jwt · ruby-jwt
Critical9.1 - CVE-2025-54887
jwe: Missing AES-GCM authentication tag validation in encrypted JWEs
jwt · ruby-jwe
Critical9.1