Jwt-simple Node Module (Hackerone) - vulnerabilities (CVEs)
1 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2018-05-31. Vendor: Hackerone.
CVEs of Jwt-simple Node Module
- CVE-2016-10555 - CVSS 6.5 (medium), 2018-05-31: Since "algorithm" isn't enforced in jwt.decode()in jwt-simple 0.3.0 and earlier, a malicious user could choose what algorithm is sent sent to the server. If…
