Skip to content

fast-jwt: Stateful RegExp (/g or /y) causes non-deterministic allowed-claim validation (logical DoS)

Moderate severity GitHub Reviewed Published Apr 9, 2026 in nearform/fast-jwt • Updated Apr 9, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts