Skip to content
OpenAdvisories

Package · npm

jwt-simple

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High —
    GHSA-8v5f-hp78-jgxq

    Signature Verification Bypass in jwt-simple

    Versions of `jwt-simple` prior to 0.5.3 are vulnerable to Signature Verification Bypass. If no algorithm is specified in the `decode()` function, the packages uses the algorithm in the JWT to decode tokens. This allows an attacker to create a HS256 (symmetric…

    jwt-simple npm