Improper Verification of Cryptographic Signature

Overview Affected versions of this package are vulnerable to Improper Verification of Cryptographic Signature via HMACKey and CryptographyHMACKey, which accept zero-length HMAC secrets. When an application's HS256, HS384, or HS512 verification key resolves to empty - for example, an oct JWK with ...