Includes types that provide support for creating, serializing and validating JSON Web Tokens. As of IdentityModel 7x, this is a legacy tool that should be replaced with Microsoft.IdentityModel.JsonWebTokens.
99%
Total Score
100
94
100
100
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2026-11109 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. System.IdentityModel.Tokens.Jwt is vulnerable to Authentication Bypass in versions 7.0.0 - 7.7.1. | 7.0.0 - 7.7.1 | Medium |
AIKIDO-2026-11098 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. System.IdentityModel.Tokens.Jwt is vulnerable to Information Disclosure in versions 8.0.0 - 8.18.0. | 8.0.0 - 8.18.0 | Medium |
CVE-2024-21319 System.IdentityModel.Tokens.Jwt is vulnerable to Uncontrolled Resource Consumption in versions 0.0.0 - 5.7.0, 6.5.0 - 6.34.0 and 7.0.0-preview - 7.1.2. | 0.0.0 - 5.7.06.5.0 - 6.34.07.0.0-preview - 7.1.2 | Medium |
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
microsoft.identitymodel.jsonwebtokens Version [8.22.0, ) | — | — |
microsoft.identitymodel.tokens Version [8.22.0, ) | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.