Vulnerabilities in jwt

2 results
CVE-2026-45363CRITICAL`jwt` (Ruby gem) - empty-key HMAC bypassEPSS 0.4%CVE-2025-54887CRITICALjwe: Missing AES-GCM authentication tag validation in encrypted JWEsEPSS 0.3%