FA
Vendor
@fastify/jwt
3
CVEs
0
On KEV
2
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-110024 | FA @fastify/jwt @fastify/jwt | 6.8 | Oct 18 | @fastify/jwt vulnerable to missing token expiration when per-call options drop global defaults |
| CVE-2026-107275 | FA @fastify/jwt @fastify/jwt | 6.8 | Oct 8 | @fastify/jwt vulnerable to missing token expiration when temporal options cannot be parsed |
| CVE-2026-18500 | FA @fastify/jwt @fastify/jwt | 8.1 | Aug 15 | @fastify/jwt vulnerable to authorization bypass via global secret overriding the per-request key |