{"action":"Upgrade fast-jwt to 3.3.2 or later.","affected":[{"fixed":"3.3.2","introduced":"0"}],"component":"fast-jwt","cve_ids":["CVE-2023-48223"],"ecosystem":"npm","epss":0.00681,"exploited":false,"fixed_versions":["3.3.2"],"ghsa_id":"GHSA-c2ff-88x2-x9pg","id":"tcs_01M5KFHEWV6YBJKMFAWJ9K2KDZ","modified_at":"2023-11-20T21:12:09.610221Z","published_at":"2023-11-20T20:58:56Z","references":["https://osv.dev/vulnerability/GHSA-c2ff-88x2-x9pg","https://github.com/nearform/fast-jwt/security/advisories/GHSA-c2ff-88x2-x9pg","https://nvd.nist.gov/vuln/detail/CVE-2023-48223","https://github.com/nearform/fast-jwt/commit/15a6e92c9adb39acde41a9b11cec0cbde8ad763b","https://github.com/nearform/fast-jwt","https://github.com/nearform/fast-jwt/blob/master/src/crypto.js#L29","https://github.com/nearform/fast-jwt/releases/tag/v3.3.2"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"GHSA-c2ff-88x2-x9pg","url":"https://osv.dev/vulnerability/GHSA-c2ff-88x2-x9pg"}],"summary":"JWT Algorithm Confusion"}