Mmastodon TechnologyCybersecurity first seen 22 h ago, last 22 h ago, peak #10

Security flaw disclosed in OpenWallet Foundation SD-JWT JavaScript libraries

Original: 🚨 EUVD-2026-113215 📊 Score: 7.1/10 (CVSS v3.1) 📦 Product: @sd-jwt/core, @sd-jwt/decode 🏢 Vendor: openwallet-foundation 📅

A vulnerability tracked as EUVD-2026-113215 has been published affecting @sd-jwt/core and @sd-jwt/decode, the JavaScript packages maintained by the OpenWallet Foundation implementing the Selective Disclosure JWT specification. Versions 0.19.0 and earlier are affected, and the flaw carries a CVSS v3.1 score of 7.1 out of 10, rated high severity. The advisory record was updated on 29 October 2026. Developers using these libraries in credential or identity workflows are expected to check whether patched releases are available and update their dependencies accordingly.

Why now: A newly published high-severity vulnerability in widely used digital-identity libraries prompts developers to assess whether their projects are exposed.

OpenWallet Foundation@sd-jwt/core@sd-jwt/decodeEUVD-2026-113215

Open on mastodon →

Evidence

• 🚨 EUVD-2026-113215 📊 Score: 7.1/10 (CVSS v3.1) 📦 Product: @sd-jwt/core, @sd-jwt/decode 🏢 Vendor: openwallet-foundation 📅 Updated: 2026-10-29 📝 SD JWT JS is a JavaScript implementation of the Selective Disclosure JWT (SD-JWT) specification. In version 0.19.0 and earlier,… · EUVD_Bot · 2

API: https://socialmediatrends-api.osmike.com/v1/trends/4142718