PatchTheCVEjson web token project vulnerabilities
Recent CVEs affecting json web token project products. 1 tracked.
json web token project has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2022-12-27. Highest priority: CVE-2015-10004 (score 45/100).
- CVE-2015-10004 HIGH 7.5 MITIGATE Token validation methods are susceptible to a timing side-channel during HMAC comparison
FAQ
How do I fix json web token project vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is json web token project being exploited right now?
None of the tracked json web token project CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which json web token project CVE should I patch first?
CVE-2015-10004 currently ranks highest (45/100): Token validation methods are susceptible to a timing side-channel during HMAC comparison.