Advisories · Technology
@fastify/jwt.
Every CVE that names @fastify/jwt among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.8 Medium
@fastify/jwt vulnerable to missing token expiration when per-call options drop global defaults
- @fastify/jwt
- Authentication bypass
- CVSS 6.8 Medium
@fastify/jwt vulnerable to missing token expiration when temporal options cannot be parsed
- @fastify/jwt
- Authentication bypass
- CWE-390
- CVSS 8.1 High
@fastify/jwt vulnerable to authorization bypass via global secret overriding the per-request key
- @fastify/jwt
- Weak cryptography or TLS