Vulnerability in jwt-simple package
Summary
GHSA-chgg-rrmv-5q7x: Withdrawn. Affects jwt-simple versions < 0.3.1. Fixed in 0.3.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The jwt-simple package is an npm package used for encoding and decoding JSON Web Tokens (JWTs). It provides a simple and straightforward way to work with JWTs in Node.js applications. However, a vulnerability has been identified in versions prior to 0.3.1.
Vulnerability Detail
The vulnerability, identified as GHSA-chgg-rrmv-5q7x, has been classified as moderate severity. It is a duplicate of GHSA-vgrx-w6rg-8fqf and has been withdrawn. The specific details of the vulnerability are not provided in the advisory.
How To Fix
Minimum fixed version
0.3.1
This is the first release that contains the fix.
npm install jwt-simple@0.3.1Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
No workaround is mentioned in the advisory.
Conclusion
In conclusion, a vulnerability has been identified in the jwt-simple package. It is recommended to update to version 0.3.1 or later to fix this vulnerability. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for jwt-simple →
FAQ
The impact of this vulnerability is not specified in the advisory.
No information about known exploits is provided in the advisory.
The advisory states that versions prior to 0.3.1 are affected.
No additional information is provided in the advisory.
You can find more information about this vulnerability in the advisory published by GitHub.
References
Related vulnerabilities
Recent vulnerabilities recorded for jwt-simple.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
