RubyGems/json-jwt

json-jwt allows bypass of identity checks via a sign/encryption confusion attack

Modified: 9/10/2026

JSON-jwt Gem lacked element count during splitting of JWE string

Modified: 2/16/2024

Json-jwt did not verify the cryptographic signature for data

Modified: 2/16/2024