CVE-2025-45770

The jwt v5.4.3 library was identified as containing weak encryption (CWE-326). However, this issue is currently under dispute, as it is argued that key lengths should be determined by the application rather than the library itself. The vulnerability is subject to review under CNA rules, and a fin...