Auth0 Express Jwt
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in Auth0 Express Jwt.
By the Year
In 2026 there have been 0 vulnerabilities in Auth0 Express Jwt. Express Jwt did not have any published security vulnerabilities last year.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 0 | 0.00 |
| 2025 | 0 | 0.00 |
| 2024 | 0 | 0.00 |
| 2023 | 0 | 0.00 |
| 2022 | 0 | 0.00 |
| 2021 | 0 | 0.00 |
| 2020 | 1 | 9.10 |
It may take a day or so for new Express Jwt vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Auth0 Express Jwt Security Vulnerabilities
In express-jwt (NPM package) up and including version 5.3.3
CVE-2020-15084
9.1 - Critical
- June 30, 2020
In express-jwt (NPM package) up and including version 5.3.3, the algorithms entry to be specified in the configuration is not being enforced. When algorithms is not specified in the configuration, with the combination of jwks-rsa, it may lead to authorization bypass. You are affected by this vulnerability if all of the following conditions apply: - You are using express-jwt - You do not have **algorithms** configured in your express-jwt configuration. - You are using libraries such as jwks-rsa as the **secret**. You can fix this by specifying **algorithms** in the express-jwt configuration. See linked GHSA for example. This is also fixed in version 6.0.0.
AuthZ
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Auth0 Express Jwt or by Auth0? Click the Watch button to subscribe.
