@fastify/jwt vulnerabilities
3 published CVEs name @fastify/jwt among the affected products.
- Published CVEs
- 3
- Last 12 months
- 3
- Critical
- 0
- Known exploited
- 0
Critical 0High 1Medium 2Low 0Not scored 0
Newest CVEs
- CVE-2026-110024
@fastify/jwt vulnerable to missing token expiration when per-call options drop global defaults
@fastify/jwt · @fastify/jwt
Medium6.8 - CVE-2026-107275
@fastify/jwt vulnerable to missing token expiration when temporal options cannot be parsed
@fastify/jwt · @fastify/jwt
Medium6.8 - CVE-2026-18500
@fastify/jwt vulnerable to authorization bypass via global secret overriding the per-request key
@fastify/jwt · @fastify/jwt
High8.1