Jsonwebtoken Node Module (Hackerone) - vulnerabilities (CVEs)

1 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2018-05-29. Vendor: Hackerone.

CVEs of Jsonwebtoken Node Module

• CVE-2015-9235 - CVSS 9.8 (critical), 2018-05-29: In jsonwebtoken node module before 4.2.2 it is possible for an attacker to bypass verification when a token digitally signed with an asymmetric key (RS/ES…