| Package | Affected versions | Patched versions |
|---|---|---|
| cjwt | ≥ 1.0.1, < 2019-11-25 | 2019-11-25 |
Xmidt cjwt through 1.0.1 before 2019-11-25 maps unsupported algorithms to alg=none, which sometimes leads to untrusted accidental JWT acceptance.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free