jwt
Safeguard articles tagged "jwt" — guides, analysis, and best practices for software supply chain and application security.
16 articles
CVE-2025-20188 in Cisco IOS XE WLC: Hardcoded JWT to Root RCE
A hardcoded JSON Web Token in Cisco's Wireless LAN Controller gives unauthenticated attackers a path to root via arbitrary file upload.
jsonwebtoken npm: Security Review and Safe Usage
The jsonwebtoken npm package signs and verifies JWTs for countless Node apps, and versions at or below 8.5.1 carry serious verification flaws. Here is how to use npm jsonwebtoken safely.
firebase/php-jwt: Verifying JWTs Without Getting Burned
firebase/php-jwt is the de facto library for encoding and decoding JSON Web Tokens in PHP. Here is how to use it correctly and avoid the algorithm-confusion trap.
What Is a JWT (JSON Web Token)
A JWT is a compact, signed token that carries claims like who a user is between parties. Learn its three parts, how signing works, and the common security pitfalls.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.