8 matches found
HSEC-2026-0010 Improper parsing of fractional NumericDate from JWT exp claims
Improper parsing of fractional NumericDate from JWT exp claims Since its initial commit, package jwt uses Data.Scientific.coefficientscientific to extract the fractional mantissa in a way that improperly discards the exponent. This can lead to incorrect parsing of the exp claim in JWT payload bod...
6AI score
SaveExploits0References2
20