TI-2017-07962 CVE-2017-10862 · GHSA-9pxm-8g95-q5xrInsufficient verification of data authenticity in reallyl IO jwt-scalaPriority LOW 25jwt-scala 1.2.2 and earlier fails to verify token signatures correctly which may lead to an attacker being able to pass specially crafted JWT data as a correctly signed token.CVSS 3.0MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00583 · Published 2017-10-12 · No fix listed CWE-345