Jwt vulnerabilities

Newest

• jwt ruby-jwt `jwt` (Ruby gem) - empty-key HMAC bypass CVE-2026-45363 Fix available 9.1 CriticalMay 18, 2026
• jwt ruby-jwe jwe: Missing AES-GCM authentication tag validation in encrypted JWEs CVE-2025-54887 Public exploitFix available 9.1 CriticalAugust 7, 2025