1 matches found
SD JWT JS: Tampered disclosures silently dropped instead of rejected
Summary When one Disclosure in an SD-JWT presentation is tampered so its digest no longer matches the Issuer-signed sd array, @sd-jwt/decode 0.19.0 does not reject the presentation. It silently drops the unmatched Disclosure and returns a reduced claim set, reporting success. The Issuer signature...
7.1CVSS5.9AI score0.00226EPSS
SaveExploits0References5Affected Software2
20