Описание
The json-jwt gem before 1.11.0 for Ruby lacks an element count during the splitting of a JWE string.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| ruby-json-jwt | fixed | 1.11.0-1 | package | |
| ruby-json-jwt | no-dsa | buster | package |
Примечания
https://github.com/nov/json-jwt/commit/ada16e772906efdd035e3df49cb2ae372f0f948a
EPSS
Процентиль: 65%
0.00484
Низкий
Связанные уязвимости
CVSS3: 7.5
ubuntu
около 6 лет назад
The json-jwt gem before 1.11.0 for Ruby lacks an element count during the splitting of a JWE string.
CVSS3: 7.5
nvd
около 6 лет назад
The json-jwt gem before 1.11.0 for Ruby lacks an element count during the splitting of a JWE string.
CVSS3: 7.5
github
около 6 лет назад
JSON-jwt Gem lacked element count during splitting of JWE string
EPSS
Процентиль: 65%
0.00484
Низкий