Lucene search
+L

2 matches found

Patchstack
Patchstack
added 2026/05/09 12:45 a.m.9 views

NPM: Hono has improper validation of NumericDate claims (exp, nbf, iat) in JWT verify()

NPM: Hono has improper validation of NumericDate claims exp, nbf, iat in JWT verify vulnerability discovered by ? in WordPress Npm hono versions 4.12.18...

3.8CVSS5.8AI score0.00216EPSS
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
added 2026/05/09 12:45 a.m.44 views

Hono has improper validation of NumericDate claims (exp, nbf, iat) in JWT verify()

Summary Improper validation of the JWT NumericDate claims exp, nbf, and iat in hono/utils/jwt allows tokens with non-spec-compliant claim values to silently bypass time-based checks. This issue is not exploitable by an anonymous attacker; it only manifests when a malformed claim value reaches...

3.8CVSS5.8AI score0.00216EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder