Known vulnerabilities in JSON Web Signatures

Vendor: Auth0
Software: JSON Web Signatures
Software CPE: cpe:2.3:a:auth0:node-jws:*:*:*:*:*:*:*:*
Website: https://auth0.com/
Total vulnerabilities: 1
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting JSON Web Signatures JSON Web Signatures is affected by 1 known vulnerabilities: 1 medium Critical High Medium Low

Vulnerabilities (1)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU121638 - Improper Verification of Cryptographic Signature
CVE-2025-65945		 CWE-347 Medium
No
No
 3.2.3, 4.0.1 19.01.2026 SB2026011925
SB2026011926
SB2026012034
and 14 more