Signature Verification Bypass

github.com/openpubkey/opkssh is vulnerable to Signature Verification Bypass. The vulnerability is due to improper verification of JWS structure and signature data caused by incorrect implementation of the JWS signature verification logic, allows an attacker to bypass authentication mechanisms in...