jwt/ruby-jwt

jwt/ruby-jwt

GitHubGitHub
GitHubgithub.com
ruby-jwt.orgruby-jwt.org
Releases73
Frequency2 months 2 weeks
Last Release
Stars3.68K
A ruby implementation of the RFC 7519 OAuth JSON Web Token (JWT) standard.
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2025-45765↗
9.1 CRITICAL—

ruby-jwt v3.0.0.beta1 was discovered to contain weak encryption. NOTE: the Supplier's perspective is "keysize is not something that is enforced by this library. Currently more recent versions of OpenSSL are enforcing some key sizes and those restrictions apply to the users of this gem also."