Skip to content
OpenAdvisories

Package · Go

github.com/nuts-foundation/nuts-node

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.4
    CVE-2026-41164

    nuts-node: JWT type confusion in v1 access token introspection allows VP replay as access token

    nuts-node is the reference implementation of the Nuts specification. Prior to 6.2.3 and 5.4.31, the v1 access token introspection endpoint (/auth/v1/introspect_access_token) accepts any JWT signed by a key present on the node, without validating the JWT type,…

    nuts-foundation nuts-node github.com/nuts-foundation/nuts-node Go