Malicious code in docusaurus-typeorm-jwt-gacrux (npm)

The package docusaurus-typeorm-jwt-gacrux was found to contain malicious code...

Malicious code in dysonswarm-eslint-config-jwt-deimos (npm)

The package dysonswarm-eslint-config-jwt-deimos was found to contain malicious code...

Malicious code in jwt-webpack-procyon-thuban (npm)

The package jwt-webpack-procyon-thuban was found to contain malicious code...

Malicious code in jwt-toml-leda-despina (npm)

The package jwt-toml-leda-despina was found to contain malicious code...

Malicious code in blackhole-hyperion-jwt-command (npm)

The package blackhole-hyperion-jwt-command was found to contain malicious code...

MAL-2025-24135 Malicious code in jwt-mongodb-nestjs-gacrux (npm)

The package jwt-mongodb-nestjs-gacrux was found to contain malicious code...

Malicious code in webpack-phoebe-warp-jwt (npm)

The package webpack-phoebe-warp-jwt was found to contain malicious code...

MAL-2025-24132 Malicious code in jwt-andromeda-eridanus-bellatrix (npm)

The package jwt-andromeda-eridanus-bellatrix was found to contain malicious code...

MAL-2025-19043 Malicious code in dysonswarm-eslint-config-jwt-deimos (npm)

The package dysonswarm-eslint-config-jwt-deimos was found to contain malicious code...

MAL-2025-24134 Malicious code in jwt-module-pipe-chalk (npm)

The package jwt-module-pipe-chalk was found to contain malicious code...

MAL-2025-24136 Malicious code in jwt-on-superagent-ora (npm)

The package jwt-on-superagent-ora was found to contain malicious code...

CVE-2025-8974 linlinjava litemall JSON Web Token JwtHelper.java hard-coded credentials

A vulnerability was determined in linlinjava litemall up to 1.8.0. Affected by this issue is some unknown functionality of the file litemall-wx-api/src/main/java/org/linlinjava/litemall/wx/util/JwtHelper.java of the component JSON Web Token Handler. The manipulation of the argument SECRET with th...

litemall 安全漏洞

litemall is a small mall system for linlinjava individual developers. A security vulnerability exists in litemall 1.8.0 and earlier versions, which stems from the incorrect manipulation of the parameter SECRET in the file litemall-wx-api/src/main/java/org/linlinjava/litemall/wx/util/JwtHelper.jav...

PT-2025-33360 · Linlinjava · Litemall

Name of the Vulnerable Software and Affected Versions: linlinjava litemall versions up to 1.8.0 Description: A vulnerability exists in linlinjava litemall up to version 1.8.0, specifically within the JSON Web Token Handler component, located in the file...

SUSE CVE-2025-45765

ruby-jwt v3.0.0.beta1 was discovered to contain weak encryption. NOTE: the Supplier's perspective is "keysize is not something that is enforced by this library. Currently more recent versions of OpenSSL are enforcing some key sizes and those restrictions apply to the users of this gem also."...

CVE-2025-51054

Vedo Suite 2024.17 is vulnerable to Incorrect Access Control, which allows remote attackers to obtain a valid high privilege JWT token without prior authentication via sending an empty HTTP POST request to the /autologin/ API endpoint...

CVE-2025-45765

ruby-jwt v3.0.0.beta1 was discovered to contain weak encryption. NOTE: the Supplier's perspective is "keysize is not something that is enforced by this library. Currently more recent versions of OpenSSL are enforcing some key sizes and those restrictions apply to the users of this gem also."...

DEBIAN-CVE-2025-45765

ruby-jwt v3.0.0.beta1 was discovered to contain weak encryption. NOTE: the Supplier's perspective is "keysize is not something that is enforced by this library. Currently more recent versions of OpenSSL are enforcing some key sizes and those restrictions apply to the users of this gem also."...

UBUNTU-CVE-2025-45765

ruby-jwt v3.0.0.beta1 was discovered to contain weak encryption. NOTE: the Supplier's perspective is "keysize is not something that is enforced by this library. Currently more recent versions of OpenSSL are enforcing some key sizes and those restrictions apply to the users of this gem also."...

CVE-2025-45765

CVE-2025-45765 concerns ruby-jwt v3.0.0.beta1, which is reported to contain weak encryption due to lack of enforced minimum key sizes. The Supplier’s note indicates keysize enforcement is not within the library itself, while newer OpenSSL versions enforce key size restrictions that may affect use...