libjwt vulnerabilities (Ubuntu)
3 vulnerabilities.
-
libjwtUbuntu LibJWT: Algorithm confusion allows JWT forgery with RSA JWK as empty-key HMAC 9.1 Critical -
libjwtUbuntu LibJWT has NULL/bounds validation in JWK octet and RSA PSS parsing 5.8 Medium -
libjwtUbuntu libjwt 1.15.3 uses strcmp (which is not constant time) to verify authentication, which makes it... 9.8 Critical