Skip to content
OpenAdvisories

Vendor

reallyl IO

1 known vulnerabilities.

Products

jwt-scala 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2017-10862

    Insufficient Data Verification in io.really:jwt-scala

    jwt-scala 1.2.2 and earlier fails to verify token signatures correctly which may lead to an attacker being able to pass specially crafted JWT data as a correctly signed token.

    reallyl IO jwt-scala io.really:jwt-scala Maven