Lucene search
+L

8 matches found

OSV
OSV
•added 2026/09/29 2:22 p.m.•6 views

HSEC-2026-0010 Improper parsing of fractional NumericDate from JWT exp claims

Improper parsing of fractional NumericDate from JWT exp claims Since its initial commit, package jwt uses Data.Scientific.coefficientscientific to extract the fractional mantissa in a way that improperly discards the exponent. This can lead to incorrect parsing of the exp claim in JWT payload bod...

6AI score
SaveExploits0References2
Rows per page
Query Builder