All products

json-jwt

RubyGems · Package
3 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
json-jwt allows bypass of identity checks via a sign/encryption confusion attackCVE-2023-51774 · GHSA-C8V6-786G-VJX6 json-jwt RubyGems Medium Fix reported
Json-jwt did not verify the cryptographic signature for dataCVE-2018-1000539 · GHSA-MJ4X-WCXF-HM8X json-jwt RubyGems Medium Fix reported
JSON-jwt Gem lacked element count during splitting of JWE stringCVE-2019-18848 · GHSA-CFF7-6H4Q-Q5PJ json-jwt RubyGems High Fix reported