Page MenuHomeVyOS Platform

HTTP API accepts invalid JWT tokens
Closed, ResolvedPublic

Description

https://github.com/jpadilla/pyjwt/security/advisories/GHSA-752w-5fwx-jx9f

An issue in PyJWT makes validation incomplete and can lead to security issues.

Details

Version
-
Is it a breaking change?
Perfectly compatible
Issue type
Security vulnerability

Event Timeline

dmbaturin closed this task as Resolved.
dmbaturin triaged this task as High priority.

Resolved via a Dependabot PR.