Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/04/03 4:7 a.m.10 views

fast-jwt: Cache Confusion via cacheKeyBuilder Collisions Can Return Claims From a Different Token (Identity/Authorization Mixup)

NOTE: While the library exposes a mechanism which could introduce the vulnerability, this issue is created by developer-supplied code and not by the library itself. We will add a warning and some education for users around the possible issues however since the defaults work we will not be updatin...

9.1CVSS6AI score0.00212EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder