A vulnerability was found in nearform fast-jwt up to 6.1.0 and classified as problematic. The affected element is an unknown function of the file fast-jwt/src/crypto.js of the component JSON Web Token Handler. The manipulation results in risky cryptographic algorithm. This vulnerability was named CVE-2026-34950. The attack may be performed from remote.
| Vendor | Product | Versions |
|---|---|---|
| nearform | fast-jwt | <= 6.1.0 |
Updated description with new details about the vulnerability and corrected exploit availability.
Initial creation
