12 matches found
GHSA-FWG2-GR34-Q3W8 SurrealDB: ES512 silently downgraded to ES384 due to jsonwebtoken crate limitation
When a user configures ALGORITHM ES512 for any JWT access method DEFINE ACCESS ... TYPE JWT ALGORITHM ES512, SurrealDB silently substitutes ES384 at all four internal algorithm conversion points. This occurs because the underlying jsonwebtoken crate v10.x does not include an ES512 algorithm...
4.3CVSS5.8AI score0.00278EPSS
SaveExploits0References6
20