OurCVEs
Register
Back to feed
High
GHSA-8wpc-h4q6-8fxv
(CVE-2026-107720)

Published Oct 8, 2026

CVSS

7.4

HIGH

EPSS

Exploit Prediction Scoring System — the modeled probability of in-the-wild exploitation in the next 30 days.
—

Affected packages

0
Summary

fast-jwt: createVerifier accepts unsigned JWTs when key is '' or null and algorithms is explicitly set

Developer impact

Recommended action

Affected packages
Sources