GHSA-9pxm-8g95-q5xrMediumCVSS 5.3

Insufficient Data Verification in io.really:jwt-scala

Published
May 17, 2022
Last Modified
January 30, 2023

🔗 CVE IDs covered (1)

📋 Description

jwt-scala 1.2.2 and earlier fails to verify token signatures correctly which may lead to an attacker being able to pass specially crafted JWT data as a correctly signed token.

🎯 Affected products1

  • maven/io.really:jwt-scala:<= 1.2.2

🔗 References (4)