{"source":1087397,"name":"jws","dependency":"jws","title":"Forgeable Public/Private Tokens in jws","url":"https://github.com/advisories/GHSA-gjcw-v447-2w7q","severity":"high","versions":["0.0.1","0.0.2","0.2.0","0.2.1","0.2.2","0.2.3","0.2.4","0.2.5","0.2.6","1.0.0","1.0.1","2.0.0","3.0.0","3.1.0","3.1.1","3.1.2","3.1.3","3.1.4","3.1.5","3.2.0","3.2.1","3.2.2","3.2.3","4.0.0","4.0.1"],"vulnerableVersions":["0.0.1","0.0.2","0.2.0","0.2.1","0.2.2","0.2.3","0.2.4","0.2.5","0.2.6","1.0.0","1.0.1","2.0.0"],"cwe":[],"cvss":{"score":8.7,"vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N"},"range":"<3.0.0","id":"ji2CX6Du39Mvqe5Y5qUn6yo0oC6wrGLC8x8thEPKs3OWUiAzTt2VxeetLQN+rmjU6Ckp+/B5lTJOsTiCmF3+QQ=="}