Vulnerabilities
OTRS Critical Flaw Lets Attacker Use Valid Tokens After Account Deactivation
A critical vulnerability in OTRS allows attackers to maintain access using valid JWTs even after user accounts are deactivated or passwords changed.
JWT
Everything Threat Times has reported about JWT: 3 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
fast-jwt vulnerability allows attackers to bypass JWT claim validation checks
A flaw in the fast-jwt library permits JSON array payloads to skip security validators, enabling bypass of expiry and issuer checks.
Vulnerabilities
fast-jwt 6.2.x Patch Reopens Critical JWT Algorithm Confusion Vulnerability
A fix for CVE-2026-107722 in fast-jwt versions 6.2.0 through 6.2.4 is incomplete, allowing attackers to bypass authentication by manipulating PEM key headers.