Json Web Token Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Json Web Token Project records in CISA KEV

No Json Web Token Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Json Web Token · all components

TI-2015-07932 CVE-2015-10004 · GHSA-5vw4-v588-pgv8

MEDIUM 40

Token validation methods are susceptible to a timing side-channel during HMAC comparison.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00812 Published 2022-12-27 Fixed in 0.0.0-20170426191122-ca1404ee6e83 CWE-668