[ Vendor · 2 CVEs ]
@fastify/jwt
CVEs affecting @fastify/jwt published in the last 30 days, plus any @fastify/jwt CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-110024 | 18 Oct 2026 | CVSS 6.8 | @fastify/jwt@fastify/jwt is a JWT utility plugin for Fastify. In versions prior to 10.2.5, the top-level sign and verify methods replace the globally configured… | |
| CVE-2026-107275 | 8 Oct 2026 | CVSS 6.8 | @fastify/jwt@fastify/jwt is a JSON Web Token plugin for the Fastify web framework. In versions before 10.2.3, a time span passed to expiresIn, notBefore, or… |