Product:

Fast\-Jwt

(Nearform)
Repositories

Unknown:

This might be proprietary software.
#Vulnerabilities 1
Date Id Summary Products Score Patch Annotated
2023-11-20 CVE-2023-48223 fast-jwt provides fast JSON Web Token (JWT) implementation. Prior to version 3.3.2, the fast-jwt library does not properly prevent JWT algorithm confusion for all public key types. The 'publicKeyPemMatcher' in 'fast-jwt/src/crypto.js' does not properly match all common PEM formats for public keys. To exploit this vulnerability, an attacker needs to craft a malicious JWT token containing the HS256 algorithm, signed with the public RSA key of the victim application. This attack will only work... Fast\-Jwt 5.9