2 matches found
Hono data falsification vulnerability
Hono is a web framework written in TypeScript from the Hono community. A data forgery issue vulnerability exists in Hono versions prior to 4.11.4 that stems from the JWT validation middleware allowing JWT header algorithmic values to influence signature validation, potentially leading to...
8.2CVSS5.3AI score0.00165EPSS
SaveExploits0References3
JSON Web Token Security Vulnerability
JSON Web Token is a compact URL security method for representing a statement to be transmitted between two parties. A security vulnerability exists in JSON Web Token versions prior to 3.1.1 that stems from vulnerability to JWT algorithm obfuscation attacks...
7.5CVSS6.7AI score0.00315EPSS
SaveExploits1References2
20