What’s Vulnerable › Products

Fastify/Jwt vulnerabilities

1 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your Fastify/Jwt version is affected

Latest Fastify/Jwt vulnerabilities

• CVE-2026-18500 — @fastify/jwt vulnerable to authorization bypass via global secret overriding the per-request key (CVSS 8.1)