KANIXB/JWTIssues

KANIXB/JWTIssues

GitHubGitHub
GitHubgithub.com
Releases0
This repository contains some cryptographic issues in the libraries used for JWT.
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2023-31580↗
5.9 MEDIUM—

light-oauth2 before version 2.1.27 obtains the public key without any verification. This could allow attackers to authenticate to the application with a crafted JWT token.

CVE-2023-31582↗
7.5 HIGH—

jose4j before v0.9.3 allows attackers to set a low iteration count of 1000 or less.