Most recent entries from all

EUVD-2026-71181

fkie_cve-2018-1000539

Nov json-jwt version >= 0.5.0 && < 1.9.4 contains a CWE-347: Improper Verification of Cryptographic Signature vulnerability in Decryption of AES-GCM encrypted JSON Web Tokens that can result in Attacker can forge a authentication tag. This attack appear to be exploitable via network connectivity. This vulnerability appears to have been fixed in 1.9.4 and later.

GHSA-mj4x-wcxf-hm8x — Json-jwt did not verify the cryptographic signature for data

Affected: RubyGems: json-jwt

The json-jwt rubygem version >= 0.5.0 && < 1.9.4 contains a CWE-347: Improper Verification of Cryptographic Signature vulnerability in Decryption of AES-GCM encrypted JSON Web Tokens that can result in Attacker can forge a authentication tag. This attack appear to be exploitable via network connectivity. This vulnerability appears to have been fixed in 1.9.4 and later.

gsd-2018-1000539

UBUNTU-CVE-2018-1000539

Affected: Ubuntu:18.04:LTS: ruby-json-jwt