| Package | Affected versions | Patched versions |
|---|---|---|
| ServiceStack | < 5.9.2 | 5.9.2 |
| servicestack | < 5.9.2 | 5.9.2 |
ServiceStack before 5.9.2 mishandles JWT signature verification unless an application has a custom ValidateToken function that establishes a valid minimum length for a signature.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free