Jwt

2 CVEs across 2 Jwt products. Browse Jwt vulnerabilities, severities, and proof-of-concept exploits.

Jwt products with known CVEs

ProductCVEs
Ruby-Jwe1
Ruby-Jwt1
Jwt CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-45363Critical9.12026-07-14ruby-jwt is a Ruby implementation of the RFC 7519 OAuth JSON Web Token standard. Prior to 2.10.3 and 3.2.0, JWT.decode(token, '', true, algorithm: 'HS256') acc…
CVE-2025-54887Critical9.12025-08-08jwe is a Ruby implementation of the RFC 7516 JSON Web Encryption (JWE) standard. In versions 1.1.0 and below, authentication tags of encrypted JWEs can be brut…