CVE-2026-35039: falha crítica em nearform fast-jwt
fast-jwt Affected by Cache Confusion via cacheKeyBuilder Collisions Can Return Claims From a Different Token (Identity/Authorization Mixup)
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
28Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 9.1epss 0.2%
fast-jwt provides fast JSON Web Token (JWT) implementation. From 0.0.1 to before 6.2.0, setting up a custom cacheKeyBuilder method which does not properly create unique keys for different tokens can lead to cache collisions. This could cause tokens to be mis-identified during the verification process leading to valid tokens returning claims from different valid tokens and users being mis-identified as other users based on the wrong token. Version 6.2.0 contains a patch.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Produtos afetados
nearform · fast-jwtCVEs relacionadas — nearform fast-jwt
No mesmo produto, das mais perigosas para as menos.
CVE-2023-48223MEDIUMfast-jwt JWT Algorithm ConfusionEPSS 0.7%CVE-2025-30144MEDIUMFast-JWT Improperly Validates iss ClaimsEPSS 0.6%CVE-2026-107723HIGHfast-jwt : Silent claim-validator bypass when JWT payload is a JSON arrayEPSS 0.5%CVE-2026-35040MEDIUMfast-jwt: Stateful RegExp (/g or /y) causes non-deterministic allowed-claim validation (logical DoS)EPSS 0.4%CVE-2026-107722CRITICALfast-jwt: Incomplete patch of CVE-2026-34950: Non-whitespace key-prefix re-enables RSA→HS256 algorithm confusionEPSS 0.4%CVE-2026-107721MEDIUMfast-jwt clockTolerance: Infinity silently bypasses both exp and nbf validation (and persists in the verifier cache)EPSS 0.3%