Known Vulnerabilities for Express-jwt by Auth0
Listed below are 1 of the newest known vulnerabilities associated with "Express-jwt" by "Auth0".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-110816 json | ### Summary `qs.stringify` with `arrayFormat: 'comma'` throws `TypeError: Cannot convert object to primitive value` when a... | Not Provided | 2026-10-14 | 2026-10-14 |
| CVE-2026-107177 json | Express Gateway through 1.16.11 contains a hardcoded cryptographic key vulnerability that allows attackers with datastore acc... | Not Provided | 2026-10-07 | 2026-10-07 |
| CVE-2026-107162 json | Express Gateway through 1.16.11 contains an authentication bypass vulnerability in the OAuth 2.0 refresh_token grant that fai... | Not Provided | 2026-10-07 | 2026-10-10 |
| CVE-2026-98022 json | In the Linux kernel, the following vulnerability has been resolved: net: cap tx_queue_len at S16_MAX to prevent oversized ri... | Not Provided | 2026-09-25 | 2026-10-03 |
| CVE-2026-96899 json | The Optima Express IDX WordPress plugin before 8.7.6 does not properly neutralise a script value submitted through one of its... | Not Provided | 2026-09-27 | 2026-09-28 |
| CVE-2026-96897 json | The Optima Express IDX WordPress plugin before 8.7.6 does not perform any authorisation check on one of its AJAX actions that... | Not Provided | 2026-09-27 | 2026-09-28 |
| CVE-2026-96818 json | Unauthenticated Broken Access Control in WP Express Checkout (Accept PayPal Payments) <= 2.4.9 versions. | Not Provided | 2026-09-30 | 2026-09-30 |
| CVE-2026-96607 json | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Basix NEX-Forms nex-for... | Not Provided | 2026-10-09 | 2026-10-09 |
| CVE-2026-93901 json | The Optima Express IDX plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 8.7.5... | Not Provided | 2026-09-25 | 2026-09-25 |
| CVE-2026-93271 json | In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: cap out-of-range rx MCS instead of leaving... | Not Provided | 2026-09-24 | 2026-09-24 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Auth0 | Express-jwt | 6.0.0 | |||
| Application | Auth0 | Express-jwt | 5.3.3 | |||
| Application | Auth0 | Express-jwt | 5.3.2 | |||
| Application | Auth0 | Express-jwt | 5.3.1 | |||
| Application | Auth0 | Express-jwt | 5.3.0 | |||
| Application | Auth0 | Express-jwt | 5.2.0 | |||
| Application | Auth0 | Express-jwt | 5.1.0 | |||
| Application | Auth0 | Express-jwt | 5.0.0 | |||
| Application | Auth0 | Express-jwt | 4.0.0 | |||
| Application | Auth0 | Express-jwt | 3.4.0 | |||
| Application | Auth0 | Express-jwt | 3.3.0 | |||
| Application | Auth0 | Express-jwt | 3.2.0 | |||
| Application | Auth0 | Express-jwt | 3.1.0 | |||
| Application | Auth0 | Express-jwt | 3.0.1 | |||
| Application | Auth0 | Express-jwt | 3.0.0 | |||
| Application | Auth0 | Express-jwt | 2.1.0 | |||
| Application | Auth0 | Express-jwt | 2.0.1 | |||
| Application | Auth0 | Express-jwt | 2.0.0 | |||
| Application | Auth0 | Express-jwt | 1.4.0 | |||
| Application | Auth0 | Express-jwt | 1.3.1 |