CyberSecBulletin

Keats vulnerabilities

We track 1 vulnerability in Keats products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on February 4, 2026.

1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score

Latest Keats vulnerabilities

  • 7.5 High severity

    jsonwebtoken: Access of Resource Using Incompatible Type

    CVE-2026-25537Keats

    jsonwebtoken is a JWT lib in rust. Prior to version 10.3.0, there is a Type Confusion vulnerability in jsonwebtoken, specifically, in its claim validation logic. When a standard claim (such as nbf or exp) is provided with an incorrect JSON type (Like a String