Supply chain

Auth0 Fixes an RCE flaw in the JsonWebToken library used by 22,000 projects

Auth0 has fixed a remote code execution vulnerability in the hugely popular open source library “JsonWebToken” which is used by over 22,000 projects and downloaded over 36 million times per month on NPM. The library is used in open source projects created by Microsoft, Twilio, Salesforce, Intuit, Box, IBM, Docusign, Slack, SAP, and many more. …

Auth0 Fixes an RCE flaw in the JsonWebToken library used by 22,000 projects Read More »