JWCrypto 安全漏洞

JWCrypto is an open-source implementation of a JavaScript Object Signature and Encryption JOSE web standard. Versions of JWCrypto prior to 1.5.7 contained security vulnerabilities, which stemmed from insufficient validation of the compressed output size. This could allow unauthenticated attackers...