[SECURITY] Fedora 38 Update: cpp-jwt-1.4-7.fc38

JSON Web Token(JWT) is a JSON based standard (RFC- 7519) for creating assertions or access tokens that consists of some claims (encoded within the assertion). This assertion can be used in some kind o ...

Continue Reading
[SECURITY] Fedora 38 Update: cpp-jwt-1.4-7.fc38

JSON Web Token(JWT) is a JSON based standard (RFC- 7519) for creating assertions or access tokens that consists of some claims (encoded within the assertion). This assertion can be used in some kind o ...

Continue Reading
Fedora 38 : cpp-jwt (2024-d76e37ba62)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-d76e37ba62 advisory. Fix side channel vulnerability (FEDORA-2024-d76e37ba62) No ...

Continue Reading
PocketMine-MP server crash with certain invalid JSON payloads in `LoginPacket` due to dependency vulnerability (3rd time)

Impact An attacker could crash the server by sending malformed JWT JSON in LoginPacket due to a security vulnerability in netresearch/jsonmapper, due to attempting to construct objects from scalar typ ...

Continue Reading
PocketMine-MP server crash with certain invalid JSON payloads in `LoginPacket` due to dependency vulnerability (3rd time)

Impact An attacker could crash the server by sending malformed JWT JSON in LoginPacket due to a security vulnerability in netresearch/jsonmapper, due to attempting to construct objects from scalar typ ...

Continue Reading
PocketMine-MP server crash with certain invalid JSON payloads in `LoginPacket` due to dependency vulnerability (3rd time)

Impact An attacker could crash the server by sending malformed JWT JSON in LoginPacket due to a security vulnerability in netresearch/jsonmapper, due to attempting to construct objects from scalar typ ...

Continue Reading
PocketMine-MP server crash with certain invalid JSON payloads in `LoginPacket` due to dependency vulnerability (3rd time)

Impact An attacker could crash the server by sending malformed JWT JSON in LoginPacket due to a security vulnerability in netresearch/jsonmapper, due to attempting to construct objects from scalar typ ...

Continue Reading
JWCrypto vulnerable to JWT bomb Attack in `deserialize` function

Affected version Vendor: https://github.com/latchset/jwcrypto Version: 1.5.5 Description An attacker can cause a DoS attack by passing in a malicious JWE Token with a high compression ratio. When the ...

Continue Reading

Back to Main

Subscribe for the latest news: