Description
cdbattags lua-resty-jwt 0.2.3 allows attackers to bypass all JWT-parsing signature checks by crafting a JWT with an enc header with the value A256GCM.
Advisories 1
- WID-SEC-2025-2424 IBM Rational Team Concert: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 28, 2025