PT-2023-30748 · Joaquimserafim · Jsonwebtoken

Name of the Vulnerable Software and Affected Versions: joaquimserafim/json-web-token affected versions not specified Description: The json-web-token library is vulnerable to a JWT algorithm confusion attack. This issue arises because the algorithm to use for verifying the signature of the JWT tok...