npm/jwt-simple: high
Signature Verification Bypass in jwt-simple
Action: Upgrade jwt-simple to 0.5.3 or later.
npm i jwt-simple@0.5.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.5.3 | - |
Fixed versions
| 0.5.3 |
Sources
- osv: GHSA-8v5f-hp78-jgxq
- https://github.com/hokaccha/node-jwt-simple/commit/ead36e1d687645da9c3be8befdaaef622ea33106
- https://www.npmjs.com/advisories/831
published · modified · JSON