Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
•added 2026/11/02 5:54 p.m.•11 views

SD JWT JS: Tampered disclosures silently dropped instead of rejected

Summary When one Disclosure in an SD-JWT presentation is tampered so its digest no longer matches the Issuer-signed sd array, @sd-jwt/decode 0.19.0 does not reject the presentation. It silently drops the unmatched Disclosure and returns a reduced claim set, reporting success. The Issuer signature...

7.1CVSS5.9AI score0.00226EPSS
SaveExploits0References5Affected Software2
Rows per page
Query Builder