GHSA-9pxm-8g95-q5xrMediumCVSS 5.3
Insufficient Data Verification in io.really:jwt-scala
🔗 CVE IDs covered (1)
📋 Description
jwt-scala 1.2.2 and earlier fails to verify token signatures correctly which may lead to an attacker being able to pass specially crafted JWT data as a correctly signed token.
🎯 Affected products1
- maven/io.really:jwt-scala:<= 1.2.2