jwt security bypass vulnerability

jwt is an implementation of the JSON Web Token JWT scheme for use in PHP . A security bypass vulnerability exists in the verify function of the Encryption/Symmetric.php file in jwt 1.0.2 and earlier versions. An attacker can exploit this vulnerability to forge a signature...

CVE-2016-7037

The verify function in Encryption/Symmetric.php in Malcolm Fell jwt before 1.0.3 does not use a timing-safe function for hash comparison, which allows attackers to spoof signatures via a timing attack...

PT-2017-9075

Name of the Vulnerable Software and Affected Versions jwt versions prior to 1.0.3 Description The issue concerns a timing attack that can be used to spoof signatures. This is due to the verify function in Encryption/Symmetric.php not utilizing a timing-safe function for hash comparison, allowing...