PT-2018-9435

Name of the Vulnerable Software and Affected Versions json-jwt versions 0.5.0 through 1.9.3 Description The issue is related to the decryption of AES-GCM encrypted JSON Web Tokens, where an improper verification of cryptographic signatures can occur, allowing an attacker to forge an authenticatio...