Log in Start free

jwt

Products

ProductCVEsExploitedLatest
ruby-jwe1–Aug 8, 2025
ruby-jwt1–Jul 14, 2026

Exploited and recent CVEs

  • CVE-2026-45363 Critical 9.1 `jwt` (Ruby gem) - empty-key HMAC bypass 0.4%
  • CVE-2025-54887 Critical 9.1 jwe: Missing AES-GCM authentication tag validation in encrypted JWEs 0.3%