really vulnerabilities

Products

• jwt-scala 1

Latest really CVEs

Newest publication first

1. CVE-2017-10862 Insufficient Data Verification in io.really:jwt-scala

   Published 2017-10-12

   Medium·CVSS 5.3 EPSS 0.58%

   jwt-scala 1.2.2 and earlier fails to verify token signatures correctly which may lead to an attacker being able to pass specially crafted JWT data as a correctly signed token.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.