Description
JPaseto before 0.3.0 generates weak hashes when using v2.local tokens.
Remediation
References
https://github.com/paseto-toolkit/jpaseto/releases/tag/jpaseto-0.3.0
Related Vulnerabilities
CVE-2016-10531 Vulnerability in maven package org.webjars.bower:marked
CVE-2019-19919 Vulnerability in maven package org.webjars:handlebars
CVE-2017-16076 Vulnerability in npm package proxy.js
CVE-2021-34084 Vulnerability in npm package s3-uploader
CVE-2019-18798 Vulnerability in maven package org.webjars.npm:node-sass