3738 matches found
CVE-2025-4644
A Session Fixation vulnerability existed in Payload's SQLite adapter due to identifier reuse during account creation. A malicious attacker could create a new account, save its JSON Web Token JWT, and then delete the account, which did not invalidate the JWT. As a result, the next newly created us...
CVE-2025-41702
The JWT secret key is embedded in the egOS WebGUI backend and is readable to the default user. An unauthenticated remote attacker can generate valid HS256 tokens and bypass authentication/authorization due to the use of hard-coded cryptographic key...
Linux Distros Unpatched Vulnerability : CVE-2021-22190
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A path traversal vulnerability via the GitLab Workhorse in all versions of GitLab could result in the leakage of a JWT token CVE-2021-22190 Note that Nessus...
Linux Distros Unpatched Vulnerability : CVE-2019-18848
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The json-jwt gem before 1.11.0 for Ruby lacks an element count during the splitting of a JWE string. CVE-2019-18848 Note that Nessus relies on the presence of t...
MAL-2025-24138 Malicious code in jwt-toml-leda-despina (npm)
The package jwt-toml-leda-despina was found to contain malicious code...
MAL-2025-34579 Malicious code in taurus-transport-jwt-rimraf (npm)
The package taurus-transport-jwt-rimraf was found to contain malicious code...
Malicious code in jwt-technocracy-envconfig-venus (npm)
The package jwt-technocracy-envconfig-venus was found to contain malicious code...
MAL-2025-24133 Malicious code in jwt-convict-dependencies-resolvers (npm)
The package jwt-convict-dependencies-resolvers was found to contain malicious code...
MAL-2025-39029 Malicious code in webpack-phoebe-warp-jwt (npm)
The package webpack-phoebe-warp-jwt was found to contain malicious code...
MAL-2025-33417 Malicious code in slides-request-jwt-draco (npm)
The package slides-request-jwt-draco was found to contain malicious code...
MAL-2025-29142 Malicious code in phoebe-relay-jwt-pino (npm)
The package phoebe-relay-jwt-pino was found to contain malicious code...
Malicious code in sails-event-sirius-jwt (npm)
The package sails-event-sirius-jwt was found to contain malicious code...
Malicious code in jwt-module-pipe-chalk (npm)
The package jwt-module-pipe-chalk was found to contain malicious code...
Malicious code in jwt-mongodb-nestjs-gacrux (npm)
The package jwt-mongodb-nestjs-gacrux was found to contain malicious code...
Malicious code in vuetify-jwt-pegasus-spawn (npm)
The package vuetify-jwt-pegasus-spawn was found to contain malicious code...
Malicious code in jwt-andromeda-eridanus-bellatrix (npm)
The package jwt-andromeda-eridanus-bellatrix was found to contain malicious code...
MAL-2025-18584 Malicious code in docusaurus-typeorm-jwt-gacrux (npm)
The package docusaurus-typeorm-jwt-gacrux was found to contain malicious code...
MAL-2025-38686 Malicious code in vuetify-jwt-pegasus-spawn (npm)
The package vuetify-jwt-pegasus-spawn was found to contain malicious code...