Jwt Project vulnerabilities
We track 1 vulnerability in Jwt Project products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on July 31, 2025.
1vulnerabilities
0critical
1high
0exploited
7.0average CVSS score
Latest Jwt Project vulnerabilities
- 7.0 High severity
Jwt: Inadequate Encryption Strength
jwt v5.4.3 was discovered to contain weak encryption. NOTE: this issue has been disputed on the basis that key lengths are expected to be set by an application, not by this library. This dispute is subject to review under CNA rules 4.1.4, 4.1.14, and other rul