Lucene search

K
osvGoogleOSV:GHSA-9PXM-8G95-Q5XR
HistoryMay 17, 2022 - 12:28 a.m.

Insufficient Data Verification in io.really:jwt-scala

2022-05-1700:28:41
Google
osv.dev
2

0.001 Low

EPSS

Percentile

30.8%

jwt-scala 1.2.2 and earlier fails to verify token signatures correctly which may lead to an attacker being able to pass specially crafted JWT data as a correctly signed token.

0.001 Low

EPSS

Percentile

30.8%

Related for OSV:GHSA-9PXM-8G95-Q5XR