HackerOne jwt-simple node module vulnerabilities

1 published CVE names HackerOne jwt-simple node module among the affected products.

All 1 in the list Atom feed of new CVEs

Published CVEs: 1
Last 12 months: 0
Critical: 0
Known exploited: 0

Critical 0High 0Medium 1Low 0Not scored 0

Newest CVEs

CVE-2016-10555
Since "algorithm" isn't enforced in jwt.decode()in jwt-simple 0.3.0 and earlier, a malicious user could choose what algorithm is sent sent to the server. If…
HackerOne · jwt-simple node module
Medium6.5

Most common weaknesses