Known Vulnerabilities for Json Web Token by Json Web Token Project
Listed below are 1 of the newest known vulnerabilities associated with "Json Web Token" by "Json Web Token Project".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-59854 json | SiYuan is an open-source personal knowledge management system. Prior to 3.7.1, POST /api/file/globalCopyFiles accepts attacke... | Not Provided | 2026-07-09 | 2026-07-10 |
| CVE-2026-58579 json | RAGFlow before 0.26.3 stores an agent pipeline (DSL) node name without sanitization: the agent update endpoint normalizes the... | Not Provided | 2026-07-02 | 2026-07-14 |
| CVE-2026-57522 json | Bitwarden Server before 2026.5.0 contains a JSON injection vulnerability in IntegrationTemplateProcessor.ReplaceTokens(), whi... | Not Provided | 2026-06-25 | 2026-07-14 |
| CVE-2026-56451 json | A vulnerability has been identified in Opcenter X (All versions < V2604). Affected applications do not properly validate the ... | Not Provided | 2026-07-14 | 2026-07-14 |
| CVE-2026-54458 json | WWBN AVideo is an open source video platform. Versions prior to 29.0 contain a stored DOM Cross-Site Scripting vulnerability ... | Not Provided | 2026-07-15 | 2026-07-16 |
| CVE-2026-54066 json | SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, the patch for CVE-2026-41894 ("Path Traversal ... | Not Provided | 2026-06-24 | 2026-06-25 |
| CVE-2026-53471 json | A flaw was found in migration-planner. The agent-API middleware processes JSON Web Tokens (JWTs) for authentication, but its ... | Not Provided | 2026-06-10 | 2026-06-10 |
| CVE-2026-52869 json | The MCP Python SDK, called mcp on PyPI, is a Python implementation of the Model Context Protocol (MCP). Prior to 1.27.2, the ... | Not Provided | 2026-07-15 | 2026-07-16 |
| CVE-2026-50636 json | The RemoteControl API methods invite_participants and remind_participants pass a caller-supplied token-ID array into TokenDyn... | Not Provided | 2026-06-09 | 2026-06-09 |
| CVE-2026-49844 json | Improper encoding of non-finite floating-point values during MapMessage JSON serialization in Apache Log4j API produces outpu... | Not Provided | 2026-07-10 | 2026-07-14 |