Skip to content

fast-jwt has a ReDoS when using RegExp in allowed* leading to CPU exhaustion during token verification

Moderate severity GitHub Reviewed Published Apr 9, 2026 in nearform/fast-jwt • Updated Apr 9, 2026

No closed alerts for this advisory

Give feedback on Dependabot alerts