N
Vendor security profile
nearform
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs6
Critical1
CISA KEV0
Public exploit3
Patch rate%0
Avg. CVSS7.1
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
0
0
6
CVE KEV
CVE severity distribution
6toplam CVE
Critical1 (17%)
High3 (50%)
Medium2 (33%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%50
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
6Unknown
Latest vulnerabilities
7.4
CVE-2026-107724
fast-jwt treats raw public JWK JSON as an HMAC secret, enabling HS256 token forgery
N
Patch status unknownEPSS %0
8.1
CVE-2026-107723
fast-jwt : Silent claim-validator bypass when JWT payload is a JSON array
N
Patch status unknownEPSS %0
9.8
CVE-2026-107722
fast-jwt: Incomplete patch of CVE-2026-34950: Non-whitespace key-prefix re-enables RSA→HS256 algorithm confusion
N
Patch status unknownEPSS %0
5.9
CVE-2026-107721
fast-jwt clockTolerance: Infinity silently bypasses both exp and nbf validation (and persists in the verifier cache)
N
Patch status unknownEPSS %0
7.4
CVE-2026-107720
fast-jwt: createVerifier accepts unsigned JWTs when key is '' or null and algorithms is explicitly set
N
Patch status unknownEPSS %0
4.2
CVE-2026-107719
fast-jwt: Verifier cache accepts expired JWTs without iat.
N
Patch status unknownEPSS %0