Jwt vulnerabilities

1 known vulnerability in Jwt from Jwt Project. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.0 High severity

  Jwt: Inadequate Encryption Strength

  CVE-2025-45770Jul 31, 2025Jwt Project

  jwt v5.4.3 was discovered to contain weak encryption. NOTE: this issue has been disputed on the basis that key lengths are expected to be set by an application, not by this library. This dispute is subject to review under CNA rules 4.1.4, 4.1.14, and other rul