Lucene search
GoogleOSV:GHSA-R65J-6H5F-4F92HistoryApr 01, 2024 - 3:30 a.m.
JJWT improperly generates signing keys
2024-04-0103:30:38
Google
osv.dev
53
jjwt
java
jwt
vulnerability
signing keys
JJWT (aka Java JWT) through 0.12.5 ignores certain characters and thus a user might falsely conclude that they have a strong key. The impacted code is the setSigningKey() method within the DefaultJwtParser class and the signWith() method within the DefaultJwtBuilder class.
Related
ibm
ibm
cvelist
cvelist
CVE-2024-31033
2024-04-01 00:00:00
vulnrichment
vulnrichment
CVE-2024-31033
2024-04-01 00:00:00
nvd
nvd
CVE-2024-31033
2024-04-01 02:15:07
github
github
Withdrawn: JJWT improperly generates signing keys
2024-04-01 03:30:38
cve
cve
CVE-2024-31033
2024-04-01 02:15:07
osv
osv
CVE-2024-31033
2024-04-01 02:15:07