npm/fast-jwt CVE-2023-48223: medium 5.9, EPSS 0.68%
JWT Algorithm Confusion
Action: Upgrade fast-jwt to 3.3.2 or later.
npm i fast-jwt@3.3.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.3.2 | - |
Fixed versions
| 3.3.2 |
Sources
- osv: GHSA-c2ff-88x2-x9pg
- https://github.com/nearform/fast-jwt/security/advisories/GHSA-c2ff-88x2-x9pg
- https://nvd.nist.gov/vuln/detail/CVE-2023-48223
- https://github.com/nearform/fast-jwt/commit/15a6e92c9adb39acde41a9b11cec0cbde8ad763b
- https://github.com/nearform/fast-jwt
- https://github.com/nearform/fast-jwt/blob/master/src/crypto.js#L29
- https://github.com/nearform/fast-jwt/releases/tag/v3.3.2
CVE-2023-48223 · published · modified · JSON