TI-2026-69550 CVE-2026-107275
Missing token expiration in @fastify/jwt when time spans cannot be parsed
Priority LOW 32
@fastify/jwt is a JSON Web Token plugin for the Fastify web framework.
@fastify/jwt
Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
@fastify/jwt records in CISA KEVNo @fastify/jwt vulnerabilities are listed in CISA KEV.
Records
2 records
Priority LOW 31
@fastify/jwt is a JWT utility plugin for Fastify.