FA
Product
@fastify/jwt
3
CVEs
0
On KEV
8.1
Max CVSS
2
New 30D
Severity mix
Critical 0High 1Medium 2Low 0
Watch
Add @fastify/jwt to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-18500 | 8.1 | Aug 15 | @fastify/jwt vulnerable to authorization bypass via global secret overriding the per-request key Affected: before 10.2.2 |
Showing 1