Auth0 node-jsonwebtoken

• CVE-2022-23539 Medium 5.9 jsonwebtoken unrestricted key type could lead to legacy keys usage 0.5%
• CVE-2022-23540 Medium 6.4 jsonwebtoken vulnerable to signature validation bypass due to insecure default algorithm in jwt.verify() 0.6%
• CVE-2022-23541 Medium 5.0 jsonwebtoken's insecure implementation of key retrieval function could lead to Forgeable Public/Private Tokens from RSA to HMAC 0.8%