MEDIUMRubyGems
GHSA-c8v6-786g-vjx6· CVE-2023-51774json-jwt allows bypass of identity checks via a sign/encryption confusion attack
Modified: 9/10/2026
package
pkg:rubygems/json-jwt
json-jwt allows bypass of identity checks via a sign/encryption confusion attack
Modified: 9/10/2026
JSON-jwt Gem lacked element count during splitting of JWE string
Modified: 2/16/2024
Json-jwt did not verify the cryptographic signature for data
Modified: 2/16/2024