rubygem-jwt

Direct Vulnerabilities

Known vulnerabilities in the rubygem-jwt package. This does not include vulnerabilities belonging to this package’s dependencies.

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Vulnerability	Vulnerable Version
H Improper Verification of Cryptographic Signature	*
M Information Exposure Through Log Files	<0:1.2.1-1.el7sat
M Cross-site Scripting (XSS)	<0:1.2.1-1.el7sat
M Cross-site Scripting (XSS)	<0:1.2.1-1.el7sat
M Cross-site Scripting (XSS)	<0:1.2.1-1.el7sat
M Directory Traversal	<0:1.2.1-1.el7sat
M Incorrect Permission Assignment for Critical Resource	<0:1.2.1-1.el7sat
M Cleartext Storage of Sensitive Information	<0:1.2.1-1.el7sat
M Improper Authentication	<0:1.2.1-1.el7sat
H Improper Authorization	<0:1.2.1-1.el7sat
H Cleartext Transmission of Sensitive Information	<0:1.2.1-1.el7sat
H Improper Certificate Validation	<0:1.2.1-1.el7sat
M Cross-site Scripting (XSS)	<0:1.2.1-1.el7sat
M Resource Exhaustion	<0:1.2.1-1.el7sat
M HTTP Response Splitting	<0:1.2.1-1.el7sat
M Arbitrary Argument Injection	<0:1.2.1-1.el7sat
M Improper Neutralization of Special Elements	<0:1.2.1-1.el7sat
H Deserialization of Untrusted Data	<0:1.2.1-1.el7sat
M CVE-2016-6346	<0:1.2.1-1.el7sat
M Improper Neutralization of Special Elements	<0:1.2.1-1.el7sat
H Deserialization of Untrusted Data	<0:1.2.1-1.el7sat