fast-jwt (npm) has 14 known vulnerabilities, the worst rated CRITICAL. No single fixed version is recorded that clears every advisory, so check each one below. No malicious-package signal is recorded.
CyberXYZ does not call a package safe in absolute terms. It records 14 known vulnerabilities for fast-jwt (npm), the worst rated CRITICAL, and no malicious-package signal. Whether it is acceptable depends on the version you run.
Does fast-jwt have known vulnerabilities?
Yes. CyberXYZ records 14 known vulnerabilities for fast-jwt (npm), the worst rated CRITICAL. These include GHSA-ww5h-9m49-7xx4, GHSA-gmvf-9v4p-v8jc, GHSA-rp9m-7r4c-75qg, GHSA-mvf2-f6gm-w987, GHSA-g3jj-5cmm-3hxx.
How do I check fast-jwt before installing?
Search fast-jwt in CyberXYZ Check at https://cyberxyz.io/check?q=fast-jwt. The xyz Scanner checks a project's dependencies, and CyberXYZ Proxy checks each package as it is installed.
Checked 2026-11-14 at 09:17 UTC. The most recent advisory here was published 2026-10-08. Updated continuously from NVD, GHSA, OSV and CNA feeds.