Skip to content
OpenAdvisories

Package · npm

json-web-token

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2023-48238

    JWT Algorithm Confusion in json-web-token library

    joaquimserafim/json-web-token is a javascript library use to interact with JSON Web Tokens (JWT) which are a compact URL-safe means of representing claims to be transferred between two parties. Versions prior to 4.0.0 are vulnerable to a JWT algorithm confusi…

    joaquimserafim json-web-token json-web-token npm