Homepage

jsonwebtoken vulnerabilities

JSON Web Token implementation (symmetric and asymmetric)

  • latest version

    9.0.2

  • latest non vulnerable version

    9.0.2

  • first published

    12 years ago

  • latest version published

    2 years ago

  • licenses detected

  • View jsonwebtoken package health on Snyk Advisor  (opens in a new tab)
    • Report a new vulnerability Found a mistake?

    Direct Vulnerabilities

    Known vulnerabilities in the jsonwebtoken package. This does not include vulnerabilities belonging to this package’s dependencies.

    How to fix?

    Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

    Fix for free
    VulnerabilityVulnerable Version
    • M
    Use of a Broken or Risky Cryptographic Algorithm

    <9.0.0
    • M
    Improper Restriction of Security Token Assignment

    <9.0.0
    • M
    Improper Authentication

    <9.0.0
    • H
    Authentication Bypass

    <4.2.2

    Package versions

    81 VERSIONS IN TOTAL
    versionpublisheddirect vulnerabilities
    9.0.230 Aug, 2023
    • 0
      C
    • 0
      H
    • 0
      M
    • 0
      L
    9.0.15 Jul, 2023
    • 0
      C
    • 0
      H
    • 0
      M
    • 0
      L
    9.0.021 Dec, 2022
    • 0
      C
    • 0
      H
    • 0
      M
    • 0
      L
    8.5.118 Mar, 2019
    • 0
      C
    • 0
      H
    • 3
      M
    • 0
      L
    8.5.020 Feb, 2019
    • 0
      C
    • 0
      H
    • 3
      M
    • 0
      L
    8.4.014 Nov, 2018
    • 0
      C
    • 0
      H
    • 3
      M
    • 0
      L
    8.3.011 Jun, 2018
    • 0
      C
    • 0
      H
    • 3
      M
    • 0
      L
    8.2.230 May, 2018
    • 0
      C
    • 0
      H
    • 3
      M
    • 0
      L
    8.2.15 Apr, 2018
    • 0
      C
    • 0
      H
    • 3
      M
    • 0
      L
    8.2.02 Mar, 2018
    • 0
      C
    • 0
      H
    • 3
      M
    • 0
      L