Homepage
About Snyk

com.jason-goodwin:authentikat-jwt_2.11@0.3.3 vulnerabilities

Go back to all versions of this package
Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the com.jason-goodwin:authentikat-jwt_2.11 package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • C
Timing Attack

com.jason-goodwin:authentikat-jwt_2.11 is a simple scala-jwt library.

Affected versions of this package are vulnerable to Timing Attack. A time-sensitive equality check in the JsonWebToken.validate method in main/scala/authentikat/jwt/JsonWebToken.scala in authentikat-jwt allows the supplier of a JWT token to guess bit after bit of the signature by repeating validation requests.

How to fix Timing Attack?

A fix was pushed into the master branch but not yet published.

[0,)
Go back to all versions of this package