Skip to content
NewA calmer, faster ZeroHour

Severe Security Flaw Found in "jsonwebtoken" Library Used by 22,000+ Projects

The Hacker Newsby @TheHackersNews ()2 min read2 · 1 read
Analyze CVE-2022-23529 with Vani AIImpact, affected versions, exploitation, mitigations and detection

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2022-23529
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER
——

From the original article

2 min read at thehackernews.com

 Ravie Lakshmanan  Jan 10, 2023 Software Security / Supply Chain Auth0 and Unit 42 said they are formally retracting CVE-2022-23529 (CVSS score: 7. 6) based on the fact that several prerequisites are essential for exploitation. The cybersecurity company said "important security checks" have been added to fix the problem.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.