https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-24T09:31:24.343803+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-71181 EUVD-2026-71181 2026-10-24T09:31:24.347043+00:00 EUVD-2026-71181 https://cve.radiocsirt.org/vuln/fkie_cve-2018-1000539 fkie_cve-2018-1000539 2026-10-24T09:31:24.347074+00:00

Nov json-jwt version >= 0.5.0 && < 1.9.4 contains a CWE-347: Improper Verification of Cryptographic Signature vulnerability in Decryption of AES-GCM encrypted JSON Web Tokens that can result in Attacker can forge a authentication tag. This attack appear to be exploitable via network connectivity. This vulnerability appears to have been fixed in 1.9.4 and later.

 https://cve.radiocsirt.org/vuln/ghsa-mj4x-wcxf-hm8x GHSA-mj4x-wcxf-hm8x — Json-jwt did not verify the cryptographic signature for data 2026-10-24T09:31:24.347107+00:00

Affected: RubyGems: json-jwt

The json-jwt rubygem version >= 0.5.0 && < 1.9.4 contains a CWE-347: Improper Verification of Cryptographic Signature vulnerability in Decryption of AES-GCM encrypted JSON Web Tokens that can result in Attacker can forge a authentication tag. This attack appear to be exploitable via network connectivity. This vulnerability appears to have been fixed in 1.9.4 and later.

 https://cve.radiocsirt.org/vuln/gsd-2018-1000539 gsd-2018-1000539 2026-10-24T09:31:24.347133+00:00 gsd-2018-1000539 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-1000539 UBUNTU-CVE-2018-1000539 2026-10-24T09:31:24.347145+00:00

Affected: Ubuntu:18.04:LTS: ruby-json-jwt

Nov json-jwt version >= 0.5.0 && < 1.9.4 contains a CWE-347: Improper Verification of Cryptographic Signature vulnerability in Decryption of AES-GCM encrypted JSON Web Tokens that can result in Attacker can forge a authentication tag. This attack appear to be exploitable via network connectivity. This vulnerability appears to have been fixed in 1.9.4 and later.