JSON-JWT Project JSON-JWT 1.3.0 for Ruby

CPE Details

JSON-JWT Project JSON-JWT 1.3.0 for Ruby
json-jwt_project
json-jwt
1.3.0
2019-11-13
14h10 +00:00
2019-11-13
14h10 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:json-jwt_project:json-jwt:1.3.0:*:*:*:*:ruby:*:*

Informations

Vendor

json-jwt_project

Product

json-jwt

Version

1.3.0

Target Software

ruby

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2019-18848 2019-11-12 13h23 +00:00 The json-jwt gem before 1.11.0 for Ruby lacks an element count during the splitting of a JWE string.
7.5
High
CVE-2018-1000539 2018-06-26 14h00 +00:00 Nov json-jwt version >= 0.5.0 && < 1.9.4 contains a CWE-347: Improper Verification of Cryptographic Signature vulnerability in Decryption of AES-GCM encrypted JSON Web Tokens that can result in Attacker can forge a authentication tag. This attack appear to be exploitable via network connectivity. This vulnerability appears to have been fixed in 1.9.4 and later.
5.3
Medium