Vulnerabilities

TI-2026-27244 CVE-2026-35041 · GHSA-cjw9-ghj4-fwxf

ReDoS in fast-jwt when using RegExp in allowed* leading to CPU exhaustion during token verification

MEDIUM 62

fast-jwt provides fast JSON Web Token (JWT) implementation.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00272 Published 2026-04-09 Fixed in 6.2.1 CWE-1333

TI-2026-27243 CVE-2026-35040 · GHSA-3j8v-cgw4-2g6q

MEDIUM 63

fast-jwt provides fast JSON Web Token (JWT) implementation.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00398 Published 2026-04-09 Fixed in 6.2.1 CWE-440

TI-2026-27245 CVE-2026-35042 · GHSA-hm7r-c7qw-ghp6

HIGH 72

fast-jwt provides fast JSON Web Token (JWT) implementation.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00158 Published 2026-04-06 No fix listed CWE-345

TI-2026-27242 CVE-2026-35039 · GHSA-rp9m-7r4c-75qg

MEDIUM 47

fast-jwt provides fast JSON Web Token (JWT) implementation.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00216 Published 2026-04-06 Fixed in 6.2.0 CWE-1289

TI-2026-27174 CVE-2026-34950 · GHSA-mvf2-f6gm-w987

HIGH 80

fast-jwt provides fast JSON Web Token (JWT) implementation.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.0025 Published 2026-04-06 Fixed in 6.2.0 CWE-327

TI-2023-26087 CVE-2023-48223 · GHSA-c2ff-88x2-x9pg

LOW 28

fast-jwt provides fast JSON Web Token (JWT) implementation.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00681 Published 2023-11-20 Fixed in 3.3.2 CWE-20