Skip to content
OpenAdvisories

Package · npm

@sd-jwt/decode

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.1
    CVE-2026-62374

    SD JWT JS: Tampered disclosures silently dropped instead of rejected

    SD JWT JS is a JavaScript implementation of the Selective Disclosure JWT (SD-JWT) specification. In version 0.19.0 and earlier, `@sd-jwt/decode`, also used by `@sd-jwt/core`, silently drops a tampered Disclosure whose digest no longer matches the Issuer-signe…

    openwallet-foundation @sd-jwt/decode @sd-jwt/core @sd-jwt/decode npm