CVE-2026-107719 | nearform fast-jwt up to 6.3.3 Cache src/verifier.js cacheSet authentication replay

October 8, 2026 Yanac

A vulnerability marked as critical has been reported in nearform fast-jwt up to 6.3.3. Impacted is the function cacheSet of the file src/verifier.js of the component Cache. Performing a manipulation results in authentication bypass by capture-replay.

This vulnerability is cataloged as CVE-2026-107719. It is possible to initiate the attack remotely. There is no exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More