Package · Wolfi

ruby3.2-json-jwt

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

High 8.4

CVE-2023-51774

json-jwt allows bypass of identity checks via a sign/encryption confusion attack

The json-jwt (aka JSON::JWT) gem 1.16.3 for Ruby sometimes allows bypass of identity checks via a sign/encryption confusion attack. For example, JWE can sometimes be used to bypass JSON::JWT.decode.

kube-fluentd-operator kube-fluentd-operator-compat kube-fluentd-operator-oci-entrypoint kube-fluentd-operator-default-config Ubuntu Wolfi RubyGems

Dec 25, 2023