Verification flaw in Solid identity-token-verifier

Description

No description available.

Recommendation

Update the @solid/identity-token-verifier package to the latest compatible version. Followings are version details:

• Affected version(s): < 0.5.2
• Patched version(s): 0.5.2

References

• GHSA-xmh9-rg6f-j3mr
• www.npmjs.com
• CWE-290
• OWASP 2021-A7

Related Issues

• Improper Verification of Cryptographic Signature in aws-encryption-sdk-javascript - Vulnerability
• docusaurus-plugin-content-gists vulnerability exposes GitHub Personal Access Token - CVE-2025-53624
• dcap-qvl has Missing Verification for QE Identity - CVE-2026-22696
• Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability - CVE-2024-35255

You might also like:

How to Secure your NodeJs Express Javascript Application - part 1

How to Secure your NodeJs Express Javascript Application - part 2

10 Secure Coding Best Practices to Follow in Every Project

Tags:

npm

@solid/identity-token-verifier