json-web-token vulnerabilities

1 known vulnerability in json-web-token from Joaquimserafim. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  json-web-token: Insufficient Verification of Data Authenticity

  CVE-2023-48238Nov 17, 2023Joaquimserafim

  joaquimserafim/json-web-token is a javascript library use to interact with JSON Web Tokens (JWT) which are a compact URL-safe means of representing claims to be transferred between two parties. Versions prior to 4.0.0 are vulnerable to a JWT algorithm confusio