FA
Product
@fastify/jwt
3
CVEs
0
On KEV
8.1
Max CVSS
2
New 30D
Severity mix
Critical 0High 1Medium 2Low 0
Watch
Add @fastify/jwt to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-18500 | 8.1 | Aug 15 | @fastify/jwt vulnerable to authorization bypass via global secret overriding the per-request key Affected: before 10.2.2 |
| CVE-2026-110024 | 6.8 | Oct 18 | @fastify/jwt vulnerable to missing token expiration when per-call options drop global defaults Affected: before 10.2.5 |
| CVE-2026-107275 | 6.8 | Oct 8 | @fastify/jwt vulnerable to missing token expiration when temporal options cannot be parsed Affected: before 10.2.3 |
Showing 3