Description
JPaseto before 0.3.0 generates weak hashes when using v2.local tokens.
Remediation
References
https://github.com/paseto-toolkit/jpaseto/releases/tag/jpaseto-0.3.0
Related Vulnerabilities
CVE-2017-20162 Vulnerability in npm package ms
CVE-2017-16021 Vulnerability in npm package uri-js
CVE-2019-1351 Vulnerability in npm package nodegit
CVE-2022-33980 Vulnerability in maven package org.apache.commons:commons-configuration2
CVE-2023-36479 Vulnerability in maven package org.eclipse.jetty.ee8:jetty-ee8-servlets