| Package | Affected versions | Patched versions |
|---|---|---|
| gree/jose | < 2.2.1 | 2.2.1 |
| php jose | < 2.2.1 | 2.2.1 |
The PHP JOSE Library by Gree Inc. prior to 2.2.1 is vulnerable to key confusion/algorithm substitution in the JWS component resulting in bypassing the signature verification via crafted tokens.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free