Lucene search
+L

1 matches found

Cvelist
Cvelist
•added 2026/10/08 11:05 a.m.•29 views

CVE-2026-107275 @fastify/jwt vulnerable to missing token expiration when temporal options cannot be parsed

@fastify/jwt is a JSON Web Token plugin for the Fastify web framework. In versions before 10.2.3, a time span passed to expiresIn, notBefore, or maxAge that the plugin's parser cannot read, such as a compound span, a month unit, an ISO 8601 duration, a decimal comma, or a value with surrounding...

6.8CVSS0.00312EPSS
SaveExploits0References2
Rows per page
Query Builder