Skip to content
OpenAdvisories

Package · Hackage

jwt

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Unscored —
    HSEC-2026-0010

    Improper parsing of fractional NumericDate from JWT exp claims

    # Improper parsing of fractional `NumericDate` from JWT `exp` claims Since its [initial commit][], package jwt uses [`Data.Scientific.coefficient`][scientific] to extract the fractional mantissa in a way that improperly *discards the exponent*. This can lead …

    jwt Hackage