Vulnerabilities in @fastify/jwt
3 resultsCVE-2026-107275MEDIUM@fastify/jwt vulnerable to missing token expiration when temporal options cannot be parsedEPSS 0.3%CVE-2026-18500HIGH@fastify/jwt vulnerable to authorization bypass via global secret overriding the per-request keyEPSS 0.3%CVE-2026-110024MEDIUM@fastify/jwt vulnerable to missing token expiration when per-call options drop global defaultsEPSS 0.2%