Known Vulnerabilities for Json-web-token by Joaquimserafim
Listed below are 10 of the newest known vulnerabilities associated with "Json-web-token" by "Joaquimserafim".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-116587 json | Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support ... | Not Provided | 2026-10-26 | 2026-10-26 |
| CVE-2026-116586 json | Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support ... | Not Provided | 2026-10-26 | 2026-10-26 |
| CVE-2026-116585 json | Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support ... | Not Provided | 2026-10-26 | 2026-10-26 |
| CVE-2026-114617 json | Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.9.0, OpenIDMixin.parse_id_token() reads... | Not Provided | 2026-10-22 | 2026-10-23 |
| CVE-2026-114519 json | Missing Authorization (CWE-862) in the user API of Roskus Prospero Flow CRM from 2.0.0 before 5.26.0 allows a user with a bas... | Not Provided | 2026-10-22 | 2026-10-22 |
| CVE-2026-113619 json | In Eclipse ioFog Controller versions 3.8.0 through 3.9.1, POST, PUT, and PATCH bodies on routes that enable template substitu... | Not Provided | 2026-10-20 | 2026-10-20 |
| CVE-2026-111762 json | A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol. Prior to 1.3.0.Final, RestHandler.parseRequestBody ... | Not Provided | 2026-10-20 | 2026-10-20 |
| CVE-2026-109400 json | The InstaWP Connect – 1-click WP Staging & Migration plugin for WordPress is vulnerable to Privilege Escalation in all vers... | Not Provided | 2026-10-16 | 2026-10-16 |
| CVE-2026-109309 json | SiYuan v3.7.0 before v3.8.6 contains an absolute path traversal vulnerability in the kernel's private plugin HTTP server, whi... | Not Provided | 2026-10-12 | 2026-10-13 |
| CVE-2026-107724 json | fast-jwt provides fast JSON Web Token (JWT) implementation. In 6.2.4, fast-jwt can classify raw serialized public JWK or JWKS... | Not Provided | 2026-10-08 | 2026-10-09 |