Repository Issue Activity (beta)

#1042 jwt.verify() returns numeric payload claims as strings

#1034 [Tool Share] cad-automation - Zero-cost CAD automation tool

#1032 jwt.verify accepts tokens with unrecognized `crit` header extensions (RFC 7515 §4.1.11)

#1031 ReDoS in verify() when audience option is a RegExp: attacker-controlled aud claim → catastrophic backtracking

#1030 Power

#992 Node 24 compatibility

#1023 Inquiry about lodash dependency updates

#1021 Bug: clockTolerance accepts arbitrarily large values, bypassing exp verification entirely

#1019 Regex audience matching without anchors is a security footgun

#1000 `jwt.sign()` callback is executed twice for "The payload already has an "..." property" errors

#987 Feature Request: Support for Edwards-Curve Digital Signature Algorithm (EdDSA) in JWT

#1004 Enable header.typ assertion

#991 get rif of lodash dependency

#1010 Security: Algorithm override via options.header.alg bypasses validation

#918 sign token is not equal with https://jwt.io/

#980 Node.js 'crypto' module error in jsonwebtoken

#655 Please add ES6 module/ESM support

#908 Error Message Not Clear in Token Expired and Token Invalid Signature when invoking verify method

#994 JsonWebTokenError: invalid signature

#984 jwt.verify is not async based on callback

#757 TypeScript: verify callback typings can't assume types

#939 TypeError: Right hand side of instanceof is not an object

#370 jwt.verify fails to throw error for expired tokens

#989 weird behavior with npm install

#988 HS256 reported as invalid algorithm?