EPSS
Percentile
64.7%
prime-jwt is vulnerable to unauthorized access through Improper Validation of JWT Token. The vulnerability exists as the decode method in JWTDecoder successfully validates a JWT token, with a valid header and body, but without a valid signature.
decode
JWTDecoder
github.com/inversoft/prime-jwt/commit/0d94dcef0133d699f21d217e922564adbb83a227
github.com/inversoft/prime-jwt/issues/2