Skip to content

Auth0 Blog company blog

Critical vulnerabilities in JSON Web Token libraries

by @auth0 auth0.com published 2015-03-31

Which libraries are vulnerable to attacks and how to prevent them.

Read on auth0.com → Archived copy

Points: 0
HN comments: 0
Submissions: 0
Cited by: 16 commenters

Security & Privacy Web & Frontend 2017

Cited in comments

Linked from 21 Hacker News comments by 16 different people, from Feb 2017 to Sep 2025.

Most recent:

some_furry · Sep 1, 2025
mcpherrinm · May 24, 2025
unscaled · May 28, 2024
Paul-Craft · Jun 27, 2023
dns_snek · Sep 29, 2022
GoblinSlayer · Jul 12, 2021

Search every comment that links here →

More from Auth0 Blog

All 3 posts →

Critical Vulnerabilities in JSON Web Token Libraries

2015147 points50 commentscited by 4Security & Privacy details

Beating JSON performance with Protobuf

2018cited by 10Software Engineering details

Related posts from the same era

Announcing the first SHA-1 collision

Google Security Blog20173,030 points485 commentscited by 13 details

Why I’m done with Chrome

Matthew Green20182,357 points838 commentscited by 4 details

Reading privileged memory with a side-channel

Google Project Zero20182,334 points594 commentscited by 26 details

Accidentally Stopping a Global Cyber Attack

MalwareTech20171,981 points338 commentscited by 8 details

1.1.1.1: Fast, privacy-first consumer DNS service

Cloudflare Blog20181,895 points657 commentscited by 23 details

Why Raspberry Pi Isn't Vulnerable to Spectre or Meltdown

Raspberry Pi Blog20181,603 points215 commentscited by 10 details