Description
JPaseto before 0.3.0 generates weak hashes when using v2.local tokens.
Remediation
References
https://github.com/paseto-toolkit/jpaseto/releases/tag/jpaseto-0.3.0
Related Vulnerabilities
CVE-2021-27292 Vulnerability in npm package ua-parser-js
CVE-2016-10681 Vulnerability in npm package roslib-socketio
CVE-2022-35143 Vulnerability in npm package raneto
CVE-2022-35948 Vulnerability in maven package org.webjars.npm:undici
CVE-2022-25644 Vulnerability in npm package @pendo324/get-process-by-name