Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-c32j-vqhx-rx3x
  • RubyGems/jwt
 ruby-jwt: Empty-key HMAC bypass; cross-language sibling of CVE-2026-44351 18 May
  • Fix available
  • Severity - 7.4 (High)
MAL-2026-3632
  • RubyGems/knot-devise-jwt-helper
 Malicious code in knot-devise-jwt-helper (RubyGems) 13 May
  • No fix available
GHSA-c8v6-786g-vjx6
  • RubyGems/json-jwt
 json-jwt allows bypass of identity checks via a sign/encryption confusion attack 29 Feb 2024
  • Fix available
GHSA-cff7-6h4q-q5pj
  • RubyGems/json-jwt
 JSON-jwt Gem lacked element count during splitting of JWE string 14 Nov 2019
  • Fix available
  • Severity - 7.5 (High)
GHSA-mj4x-wcxf-hm8x
  • RubyGems/json-jwt
 Json-jwt did not verify the cryptographic signature for data 31 Jul 2018
  • Fix available
  • Severity - 5.3 (Medium)