Lucene search
+L

1 matches found

OSV
OSV
added 2026/04/09 4:41 p.m.8 views

GHSA-CJW9-GHJ4-FWXF fast-jwt has a ReDoS when using RegExp in allowed* leading to CPU exhaustion during token verification

⚠️ IMPORTANT CLARIFICATIONS Affected Configurations This vulnerability ONLY affects applications that: - Use RegExp objects not strings in the allowedAud, allowedIss, allowedSub, allowedJti, or allowedNonce options - Configure patterns susceptible to catastrophic backtracking - Example: allowedAud...

4.2CVSS5.9AI score0.00262EPSS
SaveExploits1References6
Rows per page
Query Builder