tocsin

Debian/libjwt3: unknown

LibJWT is a C JSON Web Token Library. From 3.0.0 to 3.3.2, libjwt accepts an RSA JWK that does not contain an alg parameter as the verification key for an HS256/HS384/HS512 token. In the OpenSSL backe

Action: Upgrade libjwt3 to 3.3.3-1 or later.

Affected

introducedfixedlast affected
03.3.3-1-

Fixed versions

3.3.3-1

Sources

published · modified · JSON