CVE-2022-25898
1 advisory.
npm/jsrsasign CVE-2022-25898: high 8.6
JWS and JWT signature validation vulnerability with special characters
Action: Upgrade jsrsasign to 10.5.25 or later.
npm i jsrsasign@10.5.25Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.8.0 | 10.5.25 | - |
Fixed versions
| 10.5.25 |
Sources
- osv: GHSA-3fvg-4v2m-98jf
- https://nvd.nist.gov/vuln/detail/CVE-2022-25898
- https://github.com/kjur/jsrsasign/commit/4536a6e9e8bcf1a644ab7c07ed96e453347dae41
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-25898
- https://github.com/kjur/jsrsasign
- https://github.com/kjur/jsrsasign/releases/tag/10.5.25
- https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-2935898
- https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBKJUR-2935897
- https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-2935896
- https://snyk.io/vuln/SNYK-JS-JSRSASIGN-2869122
CVE-2022-25898 · published · modified · JSON