Skip to content
OpenAdvisories

Package · npm

@solid/identity-token-verifier

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium —
    GHSA-xmh9-rg6f-j3mr

    Verification flaw in Solid identity-token-verifier

    ### Impact #### Severity Any Pod on a Solid server using a vulnerable version of the identity-token-verifier library is at risk of a spoofed Demonstration of Proof-of-Possession (DPoP) token binding. This vulnerability could give total and complete access to …

    @solid/identity-token-verifier npm