Created
July 30, 2025 01:59
-
-
Save ZupeiNie/cd88c827eef11a1618f8baacccd240fb to your computer and use it in GitHub Desktop.
jwt < v5.4.3 was discovered to contain weak encryption.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| CVE: CVE-2025-45770 | |
| Description: | |
| we found that the HMAC and RSA key lengths used in your JSON Web Signature (JWS) implementation do not meet recommended security standards(RFC 7518、NIST SP800-117、RFC 2437). According to CWE-326 (Inadequate Encryption Strength), using keys that are too short can lead to serious vulnerabilities and potential attacks. | |
| Affected versions: <= v5.4.3 | |
| Reference: https://github.com/lcobucci/jwt/security/advisories/GHSA-rp3h-65jh-3c3m |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment