JSON Web Token - API Security Blog

CVE-2023-51774 vulnerabilities

Vulnerabilities for packages: ruby3.2-json-jwt,...Read More ...

March 28, 2024

CVE-2024-28238

Directus is a real-time API and App dashboard for managing SQL database content. When reaching the /files page, a JWT is passed via GET request. Inclusion of session tokens in URLs poses a security ri ...

March 28, 2024

CVE-2023-51774 vulnerabilities

Vulnerabilities for packages: ruby3.2-json-jwt,...Read More ...

March 28, 2024

CVE-2023-51774 vulnerabilities

Vulnerabilities for packages: ruby3.2-json-jwt,...Read More ...

March 28, 2024

Design/Logic Flaw

your_spotify is an open source, self hosted Spotify tracking dashboard. YourSpotify versions < 1.8.0 use a hardcoded JSON Web Token (JWT) secret to sign authentication tokens. Attackers can use ...

March 28, 2024

GHSA-C8V6-786G-VJX6 vulnerabilities

Vulnerabilities for packages: ruby3.2-json-jwt,...Read More ...

March 28, 2024

GHSA-C8V6-786G-VJX6 vulnerabilities

Vulnerabilities for packages: ruby3.2-json-jwt,...Read More ...

March 28, 2024

CVE-2024-28194

your_spotify is an open source, self hosted Spotify tracking dashboard. YourSpotify versions < 1.8.0 use a hardcoded JSON Web Token (JWT) secret to sign authentication tokens. Attackers can use ...

March 28, 2024