Products: 3
Vulnerabilities: 16
Known Exploited: 0
5
Critical Level Threats
5
High Level Threats
6
Medium Level Threats
0
Low Level Threats
Vulnerabilities
100806040200
JanFebMarAprMayJunJulAugSepOctNovDec
Critical Level Threats
High Level Threats
Medium Level Threats
Low Level Threats
Products Security index
Actions
Items Per Page
Vulnerabilities
CVE-2026-107724
fast-jwt treats raw public JWK JSON as an HMAC secret, enabling HS256 token forgery
Last Modified: Oct 09, 2026
Published: Oct 08, 2026
CVE-2026-107723
fast-jwt : Silent claim-validator bypass when JWT payload is a JSON array
Last Modified: Oct 14, 2026
Published: Oct 08, 2026
CVE-2026-107722
fast-jwt: Incomplete patch of CVE-2026-34950: Non-whitespace key-prefix re-enables RSA→HS256 algorithm confusion
Last Modified: Oct 13, 2026
Published: Oct 08, 2026
CVE-2026-107721
fast-jwt clockTolerance: Infinity silently bypasses both exp and nbf validation (and persists in the verifier cache)
Last Modified: Oct 09, 2026
Published: Oct 08, 2026
CVE-2026-107720
fast-jwt: createVerifier accepts unsigned JWTs when key is '' or null and algorithms is explicitly set
Last Modified: Oct 09, 2026
Published: Oct 08, 2026
Items Per Page
