`jsonwebtoken`

Ecosystem:
npm

Package URL:
pkg:npm/jsonwebtoken

Total PRs:
1,678 Dependabot PRs

Latest PR:
about 7 hours ago

Unique Repositories:
1,126 repositories

Unique Repos (30 days):
14 repositories

Security Advisories

jsonwebtoken vulnerable to signature validation bypass due to insecure default algorithm in jwt.verify()

GHSA-qwph-4952-7xr6 CVE-2022-23540 MODERATE published over 3 years ago • updated 28 days ago

# Overview In versions <=8.5.1 of jsonwebtoken library, lack of algorithm definition and a falsy secret or key in the `jwt.verify()` function can ...

jsonwebtoken's insecure implementation of key retrieval function could lead to Forgeable Public/Private Tokens from RSA to HMAC

GHSA-hjrf-2m68-5959 CVE-2022-23541 MODERATE published over 3 years ago • updated 3 months ago

# Overview Versions `<=8.5.1` of `jsonwebtoken` library can be misconfigured so that passing a poorly implemented key retrieval function (referrin...

9.0.2 → 9.0.3 Patch PR

Closed 3 months ago 4 comments

build(deps): bump the non-breaking-changes group across 1 directory with 68 updates

ceqy/v #19

9.0.2 → 9.0.3 Patch PR

Closed 3 months ago 1 comment

Bump the minor-patch group with 7 updates

424635328/SurveyKit #199

9.0.2 → 9.0.3 Patch PR

Closed 4 months ago 4 comments

Bump the production-dependencies group across 1 directory with 7 updates

Priyanka959/E-learning-platform #13

9.0.2 → 9.0.3 Patch PR

Closed 4 months ago 1 comment

Bump the non-breaking-changes group across 1 directory with 57 updates

phucanh08/anhlp-admin #34

9.0.2 → 9.0.3 Patch PR

Closed 4 months ago 1 comment

deps: bump the backend-npm-minor-patch group with 7 updates

EncontreAqui-Imoveis/servidor-encontreaqui-imoveis #7

9.0.2 → 9.0.3 Patch PR

Closed 4 months ago 2 comments

chore(gateway): bump the minor-and-patch group across 1 directory with 17 updates

hassonor/microservices-jobber #25

9.0.2 → 9.0.3 Patch PR

Closed 4 months ago 2 comments

Bump the minor-patch group across 1 directory with 19 updates

ardfar68/asf_gh_actions_workflow_repo1 #39

9.0.2 → 9.0.3 Patch PR

Closed 4 months ago 1 comment

Bump the minor-patch group with 7 updates

424635328/SurveyKit #192

9.0.2 → 9.0.3 Patch PR

Closed 4 months ago 4 comments

chore(deps): bump the non-breaking-changes group across 1 directory with 69 updates

unitiny/vben-template #55

9.0.2 → 9.0.3 Patch PR

Closed 4 months ago 1 comment

BAU: Bump the dev-deps group across 1 directory with 17 updates

govuk-one-login/txma-ticf-query-results-delivery #319

9.0.2 → 9.0.3 Patch PR

Closed 4 months ago 1 comment

chore(backend)(deps): bump the backend-minor-patch group across 1 directory with 8 updates

james-truong/task-manager-monorepo #21

9.0.2 → 9.0.3 Patch PR

Open 4 months ago 3 comments

chore(deps): bump the production-dependencies group across 1 directory with 32 updates

stackconsult/workstation #441

9.0.2 → 9.0.3 Patch PR

Open 4 months ago 2 comments

chore(deps):(deps): bump jsonwebtoken from 9.0.2 to 9.0.3

Theprofitplatform/tpp-sms-crm #7

9.0.2 → 9.0.3 Patch PR

Open 4 months ago 1 comment

chore(deps-lambda): bump the minor-and-patch group in /aws-migration/lambda/api with 10 updates

NoussaierSalaani/smuppy-mobile #40

9.0.2 → 9.0.3 Patch PR

Open 4 months ago 2 comments

deps(backend): bump the minor-and-patch group in /TribeBackend with 5 updates

juani8/tribe #6

9.0.2 → 9.0.3 Patch PR

Open 4 months ago 4 comments

chore(deps): bump the non-breaking-changes group across 1 directory with 68 updates

unitiny/vben-template #54

9.0.2 → 9.0.3 Patch PR

Closed 4 months ago 1 comment

Bump the minor-patch group with 7 updates

424635328/SurveyKit #189

9.0.2 → 9.0.3 Patch PR

Closed 4 months ago 4 comments

chore(deps): bump the non-breaking-changes group across 1 directory with 56 updates

ximo-156/ruoyi-vue #27

9.0.2 → 9.0.3 Patch PR

Closed 4 months ago 1 comment

Bump the minor-patch group with 7 updates

424635328/SurveyKit #181

9.0.2 → 9.0.3 Patch PR

Closed 4 months ago 4 comments

build(deps): bump the non-breaking-changes group across 1 directory with 66 updates

ceqy/v #17

9.0.2 → 9.0.3 Patch PR

Closed 4 months ago 2 comments

chore(deps): bump the minor-and-patch group across 1 directory with 60 updates

dj-pearson/empty-stage-starter #121

9.0.2 → 9.0.3 Patch PR

Open 4 months ago 2 comments

chore(backend)(deps): bump the production-dependencies group across 1 directory with 5 updates

simplyarfan/Nexus #53

9.0.2 → 9.0.3 Patch PR

Open 4 months ago 3 comments

Bump the non-breaking-changes group across 1 directory with 66 updates

33qd/xh-live-admin #16

9.0.2 → 9.0.3 Patch PR

Closed 4 months ago 1 comment

deps(deps): bump the production-dependencies group with 75 updates

zone17/sovren #97

9.0.2 → 9.0.3 Patch PR

Open 4 months ago 3 comments

chore(deps): Bump the minor-and-patch group with 62 updates

raimp001/basehealth-core #9

9.0.2 → 9.0.3 Patch PR

Open 4 months ago 2 comments

Bump the non-breaking-changes group across 1 directory with 55 updates

zhanyong19860813/vue-vben-admin-main-zydemo #29

9.0.2 → 9.0.3 Patch PR

Closed 4 months ago 1 comment

Bump jsonwebtoken from 9.0.2 to 9.0.3 in /backend

divyanshu931/Yourbazzar #8

9.0.2 → 9.0.3 Patch PR

Open 4 months ago 2 comments

Bump the minor-patch group with 7 updates

424635328/SurveyKit #178

9.0.2 → 9.0.3 Patch PR

Closed 4 months ago 4 comments

build(deps-dev): bump jsonwebtoken and @types/jsonwebtoken in /console

MaterializeInc/materialize #35116

9.0.2 → 9.0.3 Patch PR

Open 4 months ago 1 comment

chore(deps): bump the patches group across 1 directory with 22 updates

langfuse/langfuse-docs #2558

9.0.2 → 9.0.3 Patch PR

Open 4 months ago 2 comments

Bump the dependencies group with 27 updates

nekotopup/rencus #2

9.0.2 → 9.0.3 Patch PR

Open 4 months ago 1 comment

Bump the non-breaking-changes group across 1 directory with 53 updates

sangjiexun/jikang-admin #31

9.0.2 → 9.0.3 Patch PR

Closed 4 months ago 1 comment

chore(deps): bump the non-breaking-changes group across 1 directory with 51 updates

Ducr/vue-vben-admin-tdesign #43

9.0.2 → 9.0.3 Patch PR

Closed 4 months ago 1 comment

chore(deps): bump the non-breaking-changes group across 1 directory with 56 updates

haocong/vue-vben-admin #26

9.0.2 → 9.0.3 Patch PR

Closed 4 months ago 2 comments

Bump the non-breaking-changes group across 1 directory with 71 updates

D36u99er/bc-pay-admin #27

9.0.2 → 9.0.3 Patch PR

Closed 4 months ago 1 comment

chore(deps): bump the non-breaking-changes group across 1 directory with 51 updates

Ducr/vue-vben-admin-playground #39

9.0.2 → 9.0.3 Patch PR

Closed 4 months ago 1 comment

build(deps): bump the non-breaking-changes group across 1 directory with 62 updates

niyuhang196511-tech/nyt-system-view #13

9.0.2 → 9.0.3 Patch PR

Closed 4 months ago 1 comment

Bump the minor-patch group with 7 updates

424635328/SurveyKit #174

9.0.2 → 9.0.3 Patch PR

Closed 4 months ago 4 comments

chore(deps): bump the non-breaking-changes group across 1 directory with 70 updates

unitiny/vben-template #47

9.0.2 → 9.0.3 Patch PR

Closed 4 months ago 1 comment

chore(deps): bump jsonwebtoken from 9.0.2 to 9.0.3

ffMathy/hey-jarvis #490

9.0.2 → 9.0.3 Patch PR

Closed 4 months ago 1 comment

chore(deps): bump the production-dependencies group with 40 updates

pratikjadhav2726/agentverse-marketplace #19

9.0.2 → 9.0.3 Patch PR

Closed 4 months ago 3 comments

chore(deps): bump the patch-updates group across 1 directory with 7 updates

Makr91/zoneweaver #99

9.0.2 → 9.0.3 Patch PR

Open 4 months ago 1 comment

chore(deps): bump the non-breaking-changes group across 1 directory with 51 updates

Ducr/vue-vben-admin-antd #45

9.0.2 → 9.0.3 Patch PR

Closed 4 months ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 55 updates

progwise/george-ai #1012

9.0.2 → 9.0.3 Patch PR

Closed 4 months ago 1 comment

chore(deps): bump the all group across 1 directory with 20 updates

dbartholomae/middy-middleware-jwt-auth #488

9.0.2 → 9.0.3 Patch PR

Closed 4 months ago 1 comment

Bump the minor-patch group with 7 updates

424635328/SurveyKit #170

9.0.2 → 9.0.3 Patch PR

Closed 4 months ago 4 comments

chore(deps): bump the production-dependencies group with 39 updates

abduvali-web/ok #6

9.0.2 → 9.0.3 Patch PR

Closed 4 months ago 2 comments

Bump the non-breaking-changes group across 1 directory with 56 updates

AfraMicah/commerce-admin #40

9.0.2 → 9.0.3 Patch PR

Closed 4 months ago 1 comment

Bump the non-breaking-changes group across 1 directory with 57 updates

phucanh08/anhlp-admin #28

9.0.2 → 9.0.3 Patch PR

Closed 4 months ago 1 comment

Package Details

Name:	`jsonwebtoken`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/jsonwebtoken`
JSON API:	View JSON

Security Advisories

4

Active advisories

CRITICAL 1

HIGH 1

MODERATE 2

View All npm Advisories

Package Information

Description:

JSON Web Token implementation (symmetric and asymmetric)

Repository:	https://github.com/auth0/node-jsonwebtoken
Homepage:	https://github.com/auth0/node-jsonwebtoken#readme
Latest Release:	`9.0.2` almost 3 years ago
Dependent Repos:	718,942
Dependent Packages:	21,931
Downloads:	85,224,722
Ranking:	Top 0.0429% by dependent repos Top 0.0268% by downloads Top 0.0048% by dependent pkgs

PR Status

Open 762 (45.4%)

Merged 103 (6.1%)

Closed 744 (44.3%)

PR Types

Major 840 (50.1%)

Minor 6 (0.4%)

Patch 736 (43.9%)

Removal 22 (1.3%)

jsonwebtoken

Security Advisories

jsonwebtoken vulnerable to signature validation bypass due to insecure default algorithm in jwt.verify()

jsonwebtoken's insecure implementation of key retrieval function could lead to Forgeable Public/Private Tokens from RSA to HMAC

jsonwebtoken unrestricted key type could lead to legacy keys usage

Verification Bypass in jsonwebtoken

Recent PRs (filtered by: Patch PRs )

Package Details

Security Advisories

4

Package Information

PR Status

PR Types

`jsonwebtoken`