Skip to content
OpenAdvisories

Package · SwiftURL

github.com/beatt83/jose-swift

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High —
    GHSA-88q6-jcjg-hvmw

    jose-swift has JWT Signature Verification Bypass via None Algorithm

    ### Summary An authentication bypass vulnerability allows any unauthenticated attacker to forge arbitrary JWT tokens by setting "alg": "none" in the token header. The library's verification functions immediately return `true` for such tokens without performin…

    github.com/beatt83/jose-swift SwiftURL