Lucene search
+L

2 matches found

OSV
OSV
added 2026/04/09 4:41 p.m.7 views

GHSA-3J8V-CGW4-2G6Q fast-jwt: Stateful RegExp (/g or /y) causes non-deterministic allowed-claim validation (logical DoS)

Impact Using certain modifiers on RegExp objects in the allowedAud, allowedIss, allowedSub, allowedJti, or allowedNonce options in verify functions can cause certain unintended behaviours. This is because some modifiers are stateful and will cause failures in every second verification attempt...

5.3CVSS5.8AI score0.00383EPSS
SaveExploits1References6
Rows per page
Query Builder