Public scan · 2026-05-01
auth0/node-jsonwebtoken
JsonWebToken implementation for node.js http://self-issued.info/docs/draft-ietf-oauth-json-web-token.html
Files scanned
74
Shor-vulnerable
13
RSA / ECC / Ed* / X25519
Grover-weakened
0
AES-128 / SHA-1 / MD5
Total occurrences
13
Breakdown by primitive
- RSA 6
- ECC certificate 4
- RSA certificate 3
Findings
download CycloneDX 1.6 CBOM → test/async_sign.tests.js open ↗
-
const { privateKey } = generateKeyPairSync('rsa', { modulusLength: 1024 }); -
const { privateKey } = generateKeyPairSync('rsa', { modulusLength: 1024 });
test/jwt.hs.tests.js open ↗
-
const { privateKey } = generateKeyPairSync('rsa', { modulusLength: 2048 });
test/jwt.malicious.tests.js open ↗
-
} = crypto.generateKeyPairSync('rsa', {modulusLength: 2048});
test/prime256v1-private.pem open ↗
-
-----BEGIN EC PRIVATE KEY-----
test/rsa-public-key.tests.js open ↗
-
const { privateKey } = generateKeyPairSync('rsa', { modulusLength: 1024 }); -
const { privateKey } = generateKeyPairSync('rsa', { modulusLength: 1024 });