JWT Algorithm Confusion in json-web-token library

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2023-48238 · Microsoft / collected KEV context

EUVD-2023-2883

GHSA-4xw9-cx39-r355

cve-program · CVE-2023-48238

• https://github.com/joaquimserafim/json-web-token/security/advisories/GHSA-4xw9-cx39-r355
• https://github.com/joaquimserafim/json-web-token/commit/b6e56b1346f48432d29133c76b65222ad93956b7

euvd · EUVD-2023-2883

• https://github.com/joaquimserafim/json-web-token/security/advisories/GHSA-4xw9-cx39-r355
• https://github.com/joaquimserafim/json-web-token/commit/b6e56b1346f48432d29133c76b65222ad93956b7

nvd · CVE-2023-48238

• https://github.com/joaquimserafim/json-web-token/commit/b6e56b1346f48432d29133c76b65222ad93956b7
• https://github.com/joaquimserafim/json-web-token/security/advisories/GHSA-4xw9-cx39-r355

osv · GHSA-4xw9-cx39-r355

• https://github.com/joaquimserafim/json-web-token/security/advisories/GHSA-4xw9-cx39-r355
• https://nvd.nist.gov/vuln/detail/CVE-2023-48238
• https://github.com/joaquimserafim/json-web-token/commit/b6e56b1346f48432d29133c76b65222ad93956b7
• https://github.com/joaquimserafim/json-web-token
• https://github.com/joaquimserafim/json-web-token/blob/acf6a462471e1b14187eb77414e9161b8b7bff7e/index.js#L86

No related operational record is retained in the current change model.