lua_resty_jwt vulnerabilities
1 known vulnerability in lua_resty_jwt from Cdbattags. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
8.1average CVSS score
Latest first
- 8.1 High severity
lua_resty_jwt: Authentication Bypass by Spoofing
cdbattags lua-resty-jwt 0.2.3 allows attackers to bypass all JWT-parsing signature checks by crafting a JWT with an enc header with the value A256GCM.