Known Vulnerabilities for Node-jws by Auth0
Listed below are 1 of the newest known vulnerabilities associated with "Node-jws" by "Auth0".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-124078 json | plist.js (npm package 'plist') before 5.0.1 contains an uncontrolled resource consumption vulnerability in the binary propert... | Not Provided | 2026-11-06 | 2026-11-06 |
| CVE-2026-124031 json | GPAC through 26.07.0 contains a type confusion vulnerability in drawable_get_aspect_2d_mpeg4() and TraverseShape() that casts... | Not Provided | 2026-11-06 | 2026-11-06 |
| CVE-2026-124030 json | GPAC through 26.07.0 contains a type confusion vulnerability in gf_sg_command_apply() in src/scenegraph/commands.c that fails... | Not Provided | 2026-11-06 | 2026-11-06 |
| CVE-2026-123562 json | devalue (sveltejs/devalue) 5.8.0 before 5.9.3 contains an unhandled promise rejection in stringifyAsync: when serializing mul... | Not Provided | 2026-11-08 | 2026-11-08 |
| CVE-2026-123560 json | Zebra before 7.0.0 contains an incomplete cleanup vulnerability that allows unauthenticated peers to stall initial sync by se... | Not Provided | 2026-11-08 | 2026-11-08 |
| CVE-2026-123557 json | ZcashFoundation Zebra zebrad before 7.0.0 contains a reachable assertion race condition that allows unauthenticated remote pe... | Not Provided | 2026-11-08 | 2026-11-08 |
| CVE-2026-123487 json | Parse Server before 8.6.115 and 9.0.0 before 9.10.7-alpha.1 validates user email address format with a regular expression who... | Not Provided | 2026-11-06 | 2026-11-06 |
| CVE-2026-123037 json | A flaw was found in the ansible-core user module. When generate_ssh_key is enabled, User.ssh_key_gen() guards the key files a... | Not Provided | 2026-11-06 | 2026-11-06 |
| CVE-2026-123033 json | Authentication bypass in the HA heartbeat origin check in middlewared in TrueNAS SCALE before 25.10.8 (and in release trains ... | Not Provided | 2026-11-05 | 2026-11-05 |
| CVE-2026-121751 json | Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node.js versions. In versions 0.39.6 thr... | Not Provided | 2026-11-04 | 2026-11-04 |