`jsonwebtoken`

Ecosystem:
npm

Package URL:
pkg:npm/jsonwebtoken

Total PRs:
1,678 Dependabot PRs

Latest PR:
1 day ago

Unique Repositories:
1,126 repositories

Unique Repos (30 days):
14 repositories

Security Advisories

jsonwebtoken vulnerable to signature validation bypass due to insecure default algorithm in jwt.verify()

GHSA-qwph-4952-7xr6 CVE-2022-23540 MODERATE published over 3 years ago • updated 29 days ago

# Overview In versions <=8.5.1 of jsonwebtoken library, lack of algorithm definition and a falsy secret or key in the `jwt.verify()` function can ...

jsonwebtoken's insecure implementation of key retrieval function could lead to Forgeable Public/Private Tokens from RSA to HMAC

GHSA-hjrf-2m68-5959 CVE-2022-23541 MODERATE published over 3 years ago • updated 3 months ago

# Overview Versions `<=8.5.1` of `jsonwebtoken` library can be misconfigured so that passing a poorly implemented key retrieval function (referrin...

9.0.2 → 9.0.3 Patch PR

Open 5 months ago 2 comments

chore(deps)(deps): bump the patch-updates group across 1 directory with 17 updates

misty-step/gitpulse #144

9.0.2 → 9.0.3 Patch PR

Closed 5 months ago 5 comments

chore(deps)(deps-dev): bump the dev-dependencies group across 1 directory with 11 updates

pdugan20/chat-app-prototype #13

9.0.2 → 9.0.3 Patch PR

Closed 5 months ago 2 comments

deps(deps): bump the production-dependencies group across 1 directory with 145 updates

WORKFL0/cursor #47

9.0.2 → 9.0.3 Patch PR

Open 5 months ago 2 comments

deps(deps): bump the dependencies group across 1 directory with 20 updates

far-hann/zevany-jewelry-store #10

9.0.2 → 9.0.3 Patch PR

Open 5 months ago 2 comments

build(deps): bump jsonwebtoken and @types/jsonwebtoken in /superset-websocket

mtyazhelkov/superset #7

9.0.0 → 9.0.3 Patch PR

Closed 5 months ago 2 comments

Bump the minor-patch group with 8 updates

424635328/SurveyKit #144

9.0.2 → 9.0.3 Patch PR

Closed 5 months ago 4 comments

Bump the non-breaking-changes group across 1 directory with 63 updates

ciwomuli/eve-wormhole-frontend #68

9.0.2 → 9.0.3 Patch PR

Open 5 months ago 1 comment

chore(deps): bump the non-breaking-changes group across 1 directory with 66 updates

dacongda/auth-center-beta-ui #40

9.0.2 → 9.0.3 Patch PR

Open 5 months ago 1 comment

Bump the non-breaking-changes group across 1 directory with 53 updates

AfraMicah/commerce-admin #35

9.0.2 → 9.0.3 Patch PR

Closed 5 months ago 1 comment

chore(deps): bump the all-dependencies group with 13 updates

navapbc/labs-asp #209

9.0.2 → 9.0.3 Patch PR

Open 5 months ago 3 comments

chore(deps): bump jsonwebtoken and @types/jsonwebtoken in /superset-websocket

RuslanKralin/superset #17

9.0.2 → 9.0.3 Patch PR

Open 5 months ago 1 comment

chore(deps): bump the non-breaking-changes group across 1 directory with 54 updates

luode2026/merchant_admin #32

9.0.2 → 9.0.3 Patch PR

Open 5 months ago 1 comment

chore(deps): bump the non-breaking-changes group across 1 directory with 48 updates

Ducr/vue-vben-admin-antd #38

9.0.2 → 9.0.3 Patch PR

Closed 5 months ago 1 comment

chore(deps): bump the non-breaking-changes group across 1 directory with 54 updates

ximo-156/ruoyi-vue #20

9.0.2 → 9.0.3 Patch PR

Closed 5 months ago 1 comment

build(deps): bump the non-breaking-changes group across 1 directory with 67 updates

ceqy/cuba-v #15

9.0.2 → 9.0.3 Patch PR

Closed 5 months ago 1 comment

Bump the minor-patch group with 8 updates

424635328/SurveyKit #141

9.0.2 → 9.0.3 Patch PR

Closed 5 months ago 4 comments

chore(deps): bump the production-dependencies group across 1 directory with 63 updates

dimpap1987/js-monorepo #80

9.0.2 → 9.0.3 Patch PR

Open 5 months ago 2 comments

Bump the non-breaking-changes group across 1 directory with 71 updates

D36u99er/bc-pay-admin #16

9.0.2 → 9.0.3 Patch PR

Closed 5 months ago 1 comment

chore(deps): bump the non-breaking-changes group across 1 directory with 71 updates

xiequantai-xqt/wanxiangtai-central-hub #28

9.0.2 → 9.0.3 Patch PR

Closed 5 months ago 1 comment

Build(deps): Bump jsonwebtoken from 9.0.2 to 9.0.3 in /backend

maxonary/convitelist #85

9.0.2 → 9.0.3 Patch PR

Open 5 months ago 1 comment

deps(deps): bump the production-dependencies group across 1 directory with 215 updates

aundre1/Video-Pool #18

9.0.2 → 9.0.3 Patch PR

Open 5 months ago 1 comment

chore(deps): bump the non-breaking-changes group across 1 directory with 68 updates

shanquan954/pettry-admin #30

9.0.2 → 9.0.3 Patch PR

Closed 5 months ago 1 comment

Bump the minor-patch group with 8 updates

424635328/SurveyKit #139

9.0.2 → 9.0.3 Patch PR

Closed 5 months ago 4 comments

chore(deps): bump the non-breaking-changes group across 1 directory with 63 updates

tuquet/catalyst #54

9.0.2 → 9.0.3 Patch PR

Closed 5 months ago 1 comment

chore(deps): bump the non-breaking-changes group across 1 directory with 72 updates

unitiny/vben-template #32

9.0.2 → 9.0.3 Patch PR

Closed 5 months ago 1 comment

build(deps): bump the non-breaking-changes group across 1 directory with 55 updates

patient-fyd/love-admin #19

9.0.2 → 9.0.3 Patch PR

Closed 5 months ago 1 comment

Bump the minor-patch group with 8 updates

424635328/SurveyKit #135

9.0.2 → 9.0.3 Patch PR

Closed 5 months ago 4 comments

chore(deps): bump the non-breaking-changes group across 1 directory with 72 updates

xiequantai-xqt/wanxiangtai-central-hub #26

9.0.2 → 9.0.3 Patch PR

Closed 5 months ago 1 comment

Bump the non-breaking-changes group across 1 directory with 53 updates

wjhmiss/AIWeb #32

9.0.2 → 9.0.3 Patch PR

Closed 5 months ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 7 updates

sobebarali/mini-task-tracker #17

9.0.2 → 9.0.3 Patch PR

Open 5 months ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 9 updates

martynas199/beauty-salon-backend #9

9.0.2 → 9.0.3 Patch PR

Open 5 months ago 1 comment

chore(deps): bump the non-breaking-changes group across 1 directory with 55 updates

ximo-156/ruoyi-vue #19

9.0.2 → 9.0.3 Patch PR

Closed 5 months ago 1 comment

chore(deps): bump the non-breaking-changes group across 1 directory with 56 updates

vayshi/learning1 #36

9.0.2 → 9.0.3 Patch PR

Closed 5 months ago 1 comment

Bump the minor-patch group with 8 updates

424635328/SurveyKit #133

9.0.2 → 9.0.3 Patch PR

Closed 5 months ago 4 comments

Bump the dependencies group across 1 directory with 15 updates

yahiahammad/UniBite #21

9.0.2 → 9.0.3 Patch PR

Open 5 months ago 2 comments

chore(deps)(deps-dev): bump the dev-dependencies group with 10 updates

pdugan20/chat-app-prototype #5

9.0.2 → 9.0.3 Patch PR

Closed 5 months ago 2 comments

chore(deps): bump the non-breaking-changes group across 1 directory with 53 updates

itwangzi/YueziWebAdmin #36

9.0.2 → 9.0.3 Patch PR

Closed 5 months ago 1 comment

chore(deps): Bump the production-dependencies group across 1 directory with 23 updates

UnitedWeRise-org/UnitedWeRise #51

9.0.2 → 9.0.3 Patch PR

Open 5 months ago 4 comments

build(deps): bump the dependencias-front group across 1 directory with 163 updates

ifpebj-ti/horas-discentes #238

9.0.2 → 9.0.3 Patch PR

Closed 5 months ago 1 comment

chore(deps): bump the non-breaking-changes group across 1 directory with 72 updates

xiequantai-xqt/wanxiangtai-central-hub #25

9.0.2 → 9.0.3 Patch PR

Closed 5 months ago 1 comment

chore(deps): bump the minor-and-patch group across 1 directory with 62 updates

dj-pearson/empty-stage-starter #101

9.0.2 → 9.0.3 Patch PR

Open 5 months ago 1 comment

chore(backend)(deps): bump the production-dependencies group across 1 directory with 21 updates

vijayNagumalla/Ai-lms-platform-c #9

9.0.2 → 9.0.3 Patch PR

Open 5 months ago 2 comments

chore(backend)(deps): bump the backend-minor-patch group across 1 directory with 4 updates

james-truong/task-manager-monorepo #16

9.0.2 → 9.0.3 Patch PR

Open 5 months ago 2 comments

chore(deps): bump the production-dependencies group across 1 directory with 27 updates

MarcinDev-web/project #27

9.0.2 → 9.0.3 Patch PR

Open 5 months ago 2 comments

npm(deps): bump the production-dependencies group across 1 directory with 53 updates

tijldullers/ai_rfp_risk_scanner #57

9.0.2 → 9.0.3 Patch PR

Open 5 months ago 1 comment

⬆️(deps): Bump the root-deps group with 56 updates

kjanat/poo-tracker #204

9.0.2 → 9.0.3 Patch PR

Open 5 months ago 1 comment

chore(backend)(deps): bump the production-dependencies group across 1 directory with 5 updates

simplyarfan/Nexus #47

9.0.2 → 9.0.3 Patch PR

Open 5 months ago 3 comments

deps(deps): bump the production-dependencies group across 1 directory with 8 updates

notefinity-app/notefinity-core #22

9.0.2 → 9.0.3 Patch PR

Open 5 months ago 1 comment

Bump the non-breaking-changes group across 1 directory with 54 updates

wjhmiss/AIWeb #31

9.0.2 → 9.0.3 Patch PR

Closed 5 months ago 1 comment

Package Details

Name:	`jsonwebtoken`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/jsonwebtoken`
JSON API:	View JSON

Security Advisories

4

Active advisories

CRITICAL 1

HIGH 1

MODERATE 2

View All npm Advisories

Package Information

Description:

JSON Web Token implementation (symmetric and asymmetric)

Repository:	https://github.com/auth0/node-jsonwebtoken
Homepage:	https://github.com/auth0/node-jsonwebtoken#readme
Latest Release:	`9.0.2` almost 3 years ago
Dependent Repos:	718,942
Dependent Packages:	21,931
Downloads:	85,224,722
Ranking:	Top 0.0429% by dependent repos Top 0.0268% by downloads Top 0.0048% by dependent pkgs

PR Status

Open 762 (45.4%)

Merged 103 (6.1%)

Closed 744 (44.3%)

PR Types

Major 840 (50.1%)

Minor 6 (0.4%)

Patch 736 (43.9%)

Removal 22 (1.3%)

jsonwebtoken

Security Advisories

jsonwebtoken vulnerable to signature validation bypass due to insecure default algorithm in jwt.verify()

jsonwebtoken's insecure implementation of key retrieval function could lead to Forgeable Public/Private Tokens from RSA to HMAC

jsonwebtoken unrestricted key type could lead to legacy keys usage

Verification Bypass in jsonwebtoken

Recent PRs (filtered by: Patch PRs )

Package Details

Security Advisories

4

Package Information

PR Status

PR Types

`jsonwebtoken`