OurCVEs
Register
Back to feed
Critical
GHSA-ww5h-9m49-7xx4
(CVE-2026-107722)

Published Oct 8, 2026

CVSS

9.8

CRITICAL

EPSS

Exploit Prediction Scoring System — the modeled probability of in-the-wild exploitation in the next 30 days.
—

Affected packages

0
Summary

fast-jwt: Incomplete patch of CVE-2026-34950: Non-whitespace key-prefix re-enables RSA→HS256 algorithm confusion

Developer impact

Recommended action

Affected packages
Sources