jwt-simple project records

1 published records for vendor jwt-simple project.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

1 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
27Monitor	CVE-2016-10555Proof of concept	Since "algorithm" isn't enforced in jwt.decode()in jwt-simple 0.3.0 and earlier, a malicious user could choose what algorithm is sent sent tjwt-simple project · jwt-simple · CWE-20	Medium6.5	—	4.7%	May 31, 2018

CVE-2016-10555
27Monitor
Since "algorithm" isn't enforced in jwt.decode()in jwt-simple 0.3.0 and earlier, a malicious user could choose what algorithm is sent sent t
MediumCVSS 6.5Proof of conceptEPSS 4%
jwt-simple project · jwt-simpleMay 31, 2018