JSON Web Token implementation (symmetric and asymmetric)
75%
Total Score
26
100
100
100
50
| Title | Versions | Severity |
|---|---|---|
CVE-2022-23540 jsonwebtoken is vulnerable to Improper Authentication in versions 0.0.0 - 9.0.0. | 0.0.0 - 9.0.0 | Medium |
CVE-2022-23539 jsonwebtoken is vulnerable to Use of a Broken or Risky Cryptographic Algorithm in versions 0.0.0 - 8.5.1. | 0.0.0 - 8.5.1 | High |
CVE-2022-23541 jsonwebtoken is vulnerable to Improper Authentication in versions 0.0.0 - 8.5.1. | 0.0.0 - 8.5.1 | Medium |
CVE-2022-23529 jsonwebtoken is vulnerable to Improper Input Validation in versions 0.0.0 - 8.5.1. | 0.0.0 - 8.5.1 | High |
CVE-2015-9235 jsonwebtoken is vulnerable to Improper Input Validation in versions 0.0.0 - 4.2.2. | 0.0.0 - 4.2.2 | Critical |
| Dependency | Last Release | Score |
|---|---|---|
ms Version ^2.1.1 | — | — |
jws Version ^4.0.1 | — | — |
semver Version ^7.5.4 | — | — |
lodash.once Version ^4.0.0 | — | — |
lodash.includes Version ^4.3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

SOC 2Compliant
ISO 27001Compliant