NO
Product
node-jsonwebtoken
by auth0 · last CVE Dec 22, 2022
3
CVEs
0
On KEV
8.1
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 1Low 0
Watch

Add node-jsonwebtoken to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-23541
6.3
1%
Dec 22
jsonwebtoken's insecure implementation of key retrieval function could lead to Forgeable Public/Private Tokens from RSA to HMAC
Affected: <= 8.5.1
Showing 1