Archive
19 March 2025
Vulnerabilities first published on this day (UTC), newest first.
2 results · Clear filters · Feed
-
Medium 6.5CVE-2025-30144 Public exploit
Fast-JWT Improperly Validates iss Claims
fast-jwt provides fast JSON Web Token (JWT) implementation. Prior to 5.0.6, the fast-jwt library does not properly validate the iss claim based on the RFC 7519. The iss (issuer) claim validation within the fast-jwt library permits an array of strings as a val…
-
Medium 5.3
Improper encoding or escaping of output vulnerability in the webapi component in Synology BeeStation OS (BSM) before 1.…