Search results

[Tool Share] cad-automation - Zero-cost CAD automation tool

Status: Open.

#1034 In auth0/node-jsonwebtoken;

· 1036007003-wq opened on Jun 14, 2026

jwt.verify accepts tokens with unrecognized crit header extensions (RFC 7515 §4.1.11)

Status: Open.

#1032 In auth0/node-jsonwebtoken;

· zhangjiashuo-cs opened on May 27, 2026

ReDoS in verify() when audience option is a RegExp: attacker-controlled aud claim → catastrophic backtracking

Status: Open.

#1031 In auth0/node-jsonwebtoken;

· zhangjiashuo-cs opened on May 24, 2026

Power

Status: Open.

#1030 In auth0/node-jsonwebtoken;

· yogeshpandey3110-cyber opened on May 15, 2026

Inquiry about lodash dependency updates

Status: Open.

#1023 In auth0/node-jsonwebtoken;

· JappiPatel opened on Apr 22, 2026

Bug: clockTolerance accepts arbitrarily large values, bypassing exp verification entirely

Status: Open.

#1021 In auth0/node-jsonwebtoken;

· travis-burmaster opened on Apr 1, 2026

Regex audience matching without anchors is a security footgun

Status: Open.

#1019 In auth0/node-jsonwebtoken;

· ekreloff opened on Mar 30, 2026

Enable header.typ assertion

Status: Open.

#1004 In auth0/node-jsonwebtoken;

· ewan-chalmers opened on Nov 11, 2025

jwt.sign() callback is executed twice for "The payload already has an "..." property" errors

Status: Open.

#1000 In auth0/node-jsonwebtoken;

· pfgithub opened on Sep 10, 2025

Node 24 compatibility

Status: Open.

#992 In auth0/node-jsonwebtoken;

· benfosterlitmos opened on May 7, 2025

get rif of lodash dependency

Status: Open.

#991 In auth0/node-jsonwebtoken;

· socketsguru opened on Apr 26, 2025

Feature Request: Support for Edwards-Curve Digital Signature Algorithm (EdDSA) in JWT

Status: Open.

#987 In auth0/node-jsonwebtoken;

· RaedAddala opened on Feb 5, 2025