Skip to content
OpenAdvisories

Package · Debian

rust-jsonwebtoken

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.5
    CVE-2026-25537

    jsonwebtoken has Type Confusion that leads to potential authorization bypass

    jsonwebtoken is a JWT lib in rust. Prior to version 10.3.0, there is a Type Confusion vulnerability in jsonwebtoken, specifically, in its claim validation logic. When a standard claim (such as nbf or exp) is provided with an incorrect JSON type (Like a String…

    Keats jsonwebtoken rust-jsonwebtoken jsonwebtoken Debian Ubuntu crates.io