Vulnerabilities
Summary — last 7 days
New vulnerabilities5,181▲ 2,096 vs. last week
Critical / high2,882▲ 1,386 vs. last week
New active exploitation (KEV)9▲ 3 vs. last week
Unscored (no CVSS)179▼ 28 vs. last week
1 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Analyzed | High (8.1) | 0.26% | — | Fastify/jwt | 8/15/2026 | 9/4/2026 | @fastify/jwt is a JSON Web Token plugin for Fastify. In versions before 10.2.2, a per-request verification key passed to request.jwtVerify({ key }) is silently overridden by the plugin's globally configured secret, because the option merge applies the global key last. Applications that use different keys for different… |