Skip to content
OpenAdvisories

Vendor

lcobucci

1 known vulnerabilities.

Products

jwt 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.4
    CVE-2021-41106

    File reference keys leads to incorrect hashes on HMAC algorithms

    JWT is a library to work with JSON Web Token and JSON Web Signature. Prior to versions 3.4.6, 4.0.4, and 4.1.5, users of HMAC-based algorithms (HS256, HS384, and HS512) combined with `Lcobucci\JWT\Signer\Key\LocalFileReference` as key are having their tokens …

    lcobucci jwt lcobucci/jwt Packagist