Critical Security Flaw Found in "jsonwebtoken" Library Used by 22,000+ Projects

A high-severity security flaw has been disclosed in the open source jsonwebtoken (JWT) library that, if successfully exploited, could lead to remote code execution on a target server.
"By exploiting this vulnerability, attackers could achieve remote code execution (RCE) on a server verifying a maliciously crafted JSON web token (JWT) request," Palo Alto Networks Unit 42 researcher Artur Oleyarsh

alto attackers code code execution critical exploited exploiting flaw high json jsonwebtoken jwt library networks open source palo palo alto palo alto networks projects rce remote code remote code execution request researcher security server severity target token unit 42 vulnerability web