nearform

Thursday, October 8

• GitHub CVE-2026-107722
  fast-jwt: Incomplete patch of CVE-2026-34950: Non-whitespace key-prefix re-enables RSA→HS256 algorithm confusion

  • nearform fast-jwt
  • Critical
  • CVSS 9.8
  • EPSS 0.27%
  • Fixed version listed
  22:02 UTC