Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Inversoft Component: Prime-jwt Clear all filters
TI-2018-15929 CVE-2018-1000531 · GHSA-jc5h-g7j7-qh2w

inversoft prime-jwt version prior to commit abb0d47…

Priority LOW 36

inversoft prime-jwt version prior to commit abb0d479389a2509f939452a6767dc424bb5e6ba contains a CWE-20 vulnerability in JWTDecoder.decode that can result in an incorrect signature validation of a JWT token.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01637 Published 2018-06-26 No fix listed CWE-20
TI-2018-15778 CVE-2018-1000125 · GHSA-rhv5-f6gj-fqm2

inversoft prime-jwt version prior to version 1.3.0 or prior to commit…

Priority MEDIUM 45

inversoft prime-jwt version prior to version 1.3.0 or prior to commit 0d94dcef0133d699f21d217e922564adbb83a227 contains an input validation vulnerability in JWTDecoder.decode that can result in a JWT that is decoded and…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01366 Published 2018-03-13 No fix listed CWE-20