Published Oct 8, 2026
CVSS
HIGH
EPSS
Affected packages
fast-jwt: createVerifier accepts unsigned JWTs when key is '' or null and algorithms is explicitly set