`jsonwebtoken`

Ecosystem:
npm

Package URL:
pkg:npm/jsonwebtoken

Total PRs:
1,678 Dependabot PRs

Latest PR:
1 day ago

Unique Repositories:
1,126 repositories

Unique Repos (30 days):
14 repositories

Security Advisories

jsonwebtoken vulnerable to signature validation bypass due to insecure default algorithm in jwt.verify()

GHSA-qwph-4952-7xr6 CVE-2022-23540 MODERATE published over 3 years ago • updated 29 days ago

# Overview In versions <=8.5.1 of jsonwebtoken library, lack of algorithm definition and a falsy secret or key in the `jwt.verify()` function can ...

jsonwebtoken's insecure implementation of key retrieval function could lead to Forgeable Public/Private Tokens from RSA to HMAC

GHSA-hjrf-2m68-5959 CVE-2022-23541 MODERATE published over 3 years ago • updated 3 months ago

# Overview Versions `<=8.5.1` of `jsonwebtoken` library can be misconfigured so that passing a poorly implemented key retrieval function (referrin...

9.0.2 → 9.0.3 Patch PR

Closed 4 months ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 9 updates

emo877135-netizen/automate #15

9.0.2 → 9.0.3 Patch PR

Open 4 months ago 1 comment

Bump the non-breaking-changes group across 1 directory with 54 updates

sangjiexun/jikang-admin #30

9.0.2 → 9.0.3 Patch PR

Closed 4 months ago 1 comment

Bump jsonwebtoken and @types/jsonwebtoken

ioBroker/ioBroker.js-controller #3216

9.0.2 → 9.0.3 Patch PR

Open 4 months ago 6 comments

build(deps): bump the non-breaking-changes group across 1 directory with 67 updates

ceqy/cuba-v #18

9.0.2 → 9.0.3 Patch PR

Closed 4 months ago 1 comment

chore(deps): bump the non-breaking-changes group across 1 directory with 56 updates

haocong/vue-vben-admin #24

9.0.2 → 9.0.3 Patch PR

Closed 4 months ago 1 comment

chore(deps): bump the non-breaking-changes group across 1 directory with 56 updates

yoonayyb/vben-admin #24

9.0.2 → 9.0.3 Patch PR

Closed 4 months ago 1 comment

build(deps): bump the non-breaking-changes group with 60 updates

niyuhang196511-tech/nyt-system-view #6

9.0.2 → 9.0.3 Patch PR

Closed 4 months ago 1 comment

Bump the non-breaking-changes group across 1 directory with 66 updates

33qd/xh-live-admin #13

9.0.2 → 9.0.3 Patch PR

Closed 4 months ago 1 comment

chore(deps): bump the non-breaking-changes group across 1 directory with 55 updates

ximo-156/ruoyi-vue #22

9.0.2 → 9.0.3 Patch PR

Closed 4 months ago 1 comment

chore(deps): bump the non-breaking-changes group across 1 directory with 55 updates

haocong/vue-vben-admin #23

9.0.2 → 9.0.3 Patch PR

Closed 4 months ago 1 comment

Bump the minor-patch group with 6 updates

424635328/SurveyKit #167

9.0.2 → 9.0.3 Patch PR

Closed 4 months ago 4 comments

chore(deps): bump the non-breaking-changes group across 1 directory with 55 updates

zun-zs/vben-admin #25

9.0.2 → 9.0.3 Patch PR

Closed 4 months ago 1 comment

chore(auth): bump the minor-and-patch group in /3-auth-service with 20 updates

hassonor/microservices-jobber #19

9.0.2 → 9.0.3 Patch PR

Open 4 months ago 1 comment

build(deps): bump the yarn group with 21 updates

USThing/template-api #70

9.0.2 → 9.0.3 Patch PR

Closed 4 months ago 1 comment

Bump the minor-patch group with 6 updates

424635328/SurveyKit #161

9.0.2 → 9.0.3 Patch PR

Closed 4 months ago 4 comments

Bump the non-breaking-changes group across 1 directory with 53 updates

zhanyong19860813/vue-vben-admin-main-zydemo #25

9.0.2 → 9.0.3 Patch PR

Closed 4 months ago 1 comment

chore(deps): bump the non-breaking-changes group across 1 directory with 54 updates

zun-zs/vben-admin #24

9.0.2 → 9.0.3 Patch PR

Closed 4 months ago 1 comment

chore(deps): bump the non-breaking-changes group across 1 directory with 48 updates

Ducr/vue-vben-admin-antd #42

9.0.2 → 9.0.3 Patch PR

Closed 4 months ago 1 comment

chore(deps): bump the non-breaking-changes group across 1 directory with 54 updates

haocong/vue-vben-admin #22

9.0.2 → 9.0.3 Patch PR

Closed 4 months ago 1 comment

Bump the minor-patch group with 6 updates

424635328/SurveyKit #156

9.0.2 → 9.0.3 Patch PR

Closed 4 months ago 4 comments

chore(deps): bump the production-dependencies group across 1 directory with 39 updates

abduvali-web/ok #4

9.0.2 → 9.0.3 Patch PR

Open 4 months ago 1 comment

build(deps): bump the non-breaking-changes group across 1 directory with 63 updates

ddfdove/WiseCampus #43

9.0.2 → 9.0.3 Patch PR

Closed 4 months ago 1 comment

chore(deps): bump the minor-and-patch group across 1 directory with 61 updates

dj-pearson/empty-stage-starter #110

9.0.2 → 9.0.3 Patch PR

Open 4 months ago 1 comment

chore(deps): bump the all-dependencies group across 1 directory with 14 updates

navapbc/labs-asp #244

9.0.2 → 9.0.3 Patch PR

Open 4 months ago 9 comments

chore(backend)(deps): bump the backend-minor-patch group across 1 directory with 5 updates

james-truong/task-manager-monorepo #18

9.0.2 → 9.0.3 Patch PR

Open 4 months ago 2 comments

chore(backend)(deps): bump the production-dependencies group across 1 directory with 4 updates

simplyarfan/Nexus #52

9.0.2 → 9.0.3 Patch PR

Open 4 months ago 3 comments

Chore(deps): Bump the production-dependencies group with 38 updates

abduvali-web/ok #3

9.0.2 → 9.0.3 Patch PR

Closed 4 months ago 2 comments

chore(deps): bump the non-breaking-changes group across 1 directory with 47 updates

Ducr/vue-vben-admin-naive #48

9.0.2 → 9.0.3 Patch PR

Closed 4 months ago 1 comment

Bump the non-breaking-changes group across 1 directory with 51 updates

zhanyong19860813/vue-vben-admin-main-zydemo #24

9.0.2 → 9.0.3 Patch PR

Closed 4 months ago 1 comment

chore(deps)(deps): bump the production-dependencies group across 1 directory with 6 updates

Mathurian/nodeapp #72

9.0.2 → 9.0.3 Patch PR

Open 4 months ago 1 comment

deps: bump jsonwebtoken from 9.0.2 to 9.0.3

RohanGau/rohan-fullstack-lab #10

9.0.2 → 9.0.3 Patch PR

Closed 4 months ago 1 comment

chore(deps)(deps-dev): bump the dev-dependencies group across 1 directory with 9 updates

pdugan20/chat-app-prototype #16

9.0.2 → 9.0.3 Patch PR

Open 4 months ago 1 comment

chore(deps)(deps-dev): bump the dev-dependencies group across 1 directory with 10 updates

pdugan20/chat-app-prototype #14

9.0.2 → 9.0.3 Patch PR

Open 4 months ago 1 comment

chore(deps)(deps): bump the patch-updates group across 1 directory with 16 updates

misty-step/gitpulse #147

9.0.2 → 9.0.3 Patch PR

Open 4 months ago 3 comments

chore(deps): bump the minor-and-patch group across 1 directory with 17 updates

mherod/get-cookie #421

9.0.2 → 9.0.3 Patch PR

Closed 4 months ago 1 comment

Bump the minor-patch group with 8 updates

424635328/SurveyKit #154

9.0.2 → 9.0.3 Patch PR

Closed 4 months ago 4 comments

chore(deps)(deps): bump the patch-updates group across 1 directory with 17 updates

misty-step/gitpulse #146

9.0.2 → 9.0.3 Patch PR

Open 4 months ago 3 comments

chore(deps): bump jsonwebtoken from 9.0.2 to 9.0.3

brunomoyse/tsb-dashboard #154

9.0.2 → 9.0.3 Patch PR

Closed 4 months ago 1 comment

chore(deps): bump the minor-and-patch group across 1 directory with 17 updates

mherod/get-cookie #420

9.0.2 → 9.0.3 Patch PR

Closed 4 months ago 1 comment

chore(deps): bump the non-breaking-changes group across 1 directory with 71 updates

unitiny/vben-template #38

9.0.2 → 9.0.3 Patch PR

Closed 4 months ago 1 comment

chore(deps): bump the minor-and-patch group with 49 updates

Joseamica/avoqado-server #27

9.0.2 → 9.0.3 Patch PR

Closed 4 months ago 1 comment

chore(deps): bump the non-breaking-changes group across 1 directory with 67 updates

shanquan954/pettry-admin #34

9.0.2 → 9.0.3 Patch PR

Closed 4 months ago 1 comment

Bump the minor-patch group with 8 updates

424635328/SurveyKit #149

9.0.2 → 9.0.3 Patch PR

Closed 5 months ago 4 comments

chore(deps): bump the non-breaking-changes group across 1 directory with 49 updates

Ducr/vue-vben-admin-playground #32

9.0.2 → 9.0.3 Patch PR

Closed 5 months ago 1 comment

Bump jsonwebtoken from 9.0.2 to 9.0.3 in /Samples/auth/Outlook-Add-in-SSO-NAA-Identity/API

Git-Hub-Chris/Office-Add-in-samples #503

9.0.2 → 9.0.3 Patch PR

Closed 5 months ago 1 comment

Bump the minor-patch group with 8 updates

424635328/SurveyKit #148

9.0.2 → 9.0.3 Patch PR

Closed 5 months ago 4 comments

chore(deps): bump the production-dependencies group across 1 directory with 64 updates

dimpap1987/js-monorepo #81

9.0.2 → 9.0.3 Patch PR

Open 5 months ago 1 comment

chore(deps): bump the non-breaking-changes group across 1 directory with 48 updates

Ducr/vue-vben-admin-tdesign #36

9.0.2 → 9.0.3 Patch PR

Closed 5 months ago 1 comment

chore(deps): bump the all group across 1 directory with 19 updates

dbartholomae/middy-middleware-jwt-auth #486

9.0.2 → 9.0.3 Patch PR

Closed 5 months ago 1 comment

Package Details

Name:	`jsonwebtoken`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/jsonwebtoken`
JSON API:	View JSON

Security Advisories

4

Active advisories

CRITICAL 1

HIGH 1

MODERATE 2

View All npm Advisories

Package Information

Description:

JSON Web Token implementation (symmetric and asymmetric)

Repository:	https://github.com/auth0/node-jsonwebtoken
Homepage:	https://github.com/auth0/node-jsonwebtoken#readme
Latest Release:	`9.0.2` almost 3 years ago
Dependent Repos:	718,942
Dependent Packages:	21,931
Downloads:	85,224,722
Ranking:	Top 0.0429% by dependent repos Top 0.0268% by downloads Top 0.0048% by dependent pkgs

PR Status

Open 762 (45.4%)

Merged 103 (6.1%)

Closed 744 (44.3%)

PR Types

Major 840 (50.1%)

Minor 6 (0.4%)

Patch 736 (43.9%)

Removal 22 (1.3%)

jsonwebtoken

Security Advisories

jsonwebtoken vulnerable to signature validation bypass due to insecure default algorithm in jwt.verify()

jsonwebtoken's insecure implementation of key retrieval function could lead to Forgeable Public/Private Tokens from RSA to HMAC

jsonwebtoken unrestricted key type could lead to legacy keys usage

Verification Bypass in jsonwebtoken

Recent PRs (filtered by: Patch PRs )

Package Details

Security Advisories

4

Package Information

PR Status

PR Types

`jsonwebtoken`