Vulnerabilities
fast-jwt vulnerability allows attackers to bypass JWT claim validation checks
A flaw in the fast-jwt library permits JSON array payloads to skip security validators, enabling bypass of expiry and issuer checks.
fast-jwt
Everything Threat Times has reported about fast-jwt: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
fast-jwt 6.2.x Patch Reopens Critical JWT Algorithm Confusion Vulnerability
A fix for CVE-2026-107722 in fast-jwt versions 6.2.0 through 6.2.4 is incomplete, allowing attackers to bypass authentication by manipulating PEM key headers.