Skip to content
OpenAdvisories

Package · npm

njwt

2 known vulnerabilities.

1 result · Clear filters · Feed

  • Low —

    Out-of-bounds Read in njwt

    Versions of `njwt` prior to 1.0.0 are vulnerable to out-of-bounds reads when a number is passed into the `base64urlEncode` function. On Node.js 6.x or lower this can expose sensitive information and on any other version of Node.js this creates a Denial of Ser…