CVE-2021-29451

2021-04-1622:15:14

Google

osv.dev

9.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

49.1%

JSON

Portofino is an open source web development framework. Portofino before version 5.2.1 did not properly verify the signature of JSON Web Tokens. This allows forging a valid JWT. The issue will be patched in the upcoming 5.2.1 release.

CPENameOperatorVersion
portofinoeq5.2.0
portofinoeq4.1
portofinoeq4.0.beta6
portofinoeq5.0.3
portofinoeq4.0.2
portofinoeq4.0.beta2
portofinoeq4.2
portofinoeq4.0.5
portofinoeq5.0-alpha.2
portofinoeq4.0.0

Name	Operator	Version
portofino	eq	5.2.0
portofino	eq	4.1
portofino	eq	4.0.beta6
portofino	eq	5.0.3
portofino	eq	4.0.2
portofino	eq	4.0.beta2
portofino	eq	4.2
portofino	eq	4.0.5
portofino	eq	5.0-alpha.2
portofino	eq	4.0.0