ruby-jwt vulnerabilities (Debian)

2 vulnerabilities.

• ruby-jwt Debian `jwt` (Ruby gem) - empty-key HMAC bypass CVE-2026-45363 Fix available 9.1 CriticalMay 18, 2026
• ruby-jwt Debian ruby-jwt v3.0.0.beta1 was discovered to contain weak encryption. NOTE: the Supplier's perspective... CVE-2025-45765 Disputed 9.1 CriticalAugust 7, 2025