pkg:npm/jsonwebtoken

All known vulnerabilities

• HIGH8.1CVE-2022-23539jsonwebtoken unrestricted key type could lead to legacy keys usage
  from 0, < 9.0.0
• MEDIUM6.4CVE-2022-23540jsonwebtoken vulnerable to signature validation bypass due to insecure default algorithm in jwt.verify()
  from 0, < 9.0.0
• MEDIUM5.0CVE-2022-23541jsonwebtoken's insecure implementation of key retrieval function could lead to Forgeable Public/Private Tokens from RSA to HMAC
  from 0, < 9.0.0
• —Verification Bypass in jsonwebtoken
  from 0, < 4.2.2