CVE-2026-45363

USN-9059-1: ruby-jwt vulnerability

ruby-jwt vulnerability

It was discovered that ruby-jwt incorrectly verified HMAC signatures when the verification key was empty or missing. A remote attacker could possibly use this issue to forge tokens and bypass authentication.

11. Nov 2026

Ausgewertete Quellen

• Ubuntu
  USN-9059-1: ruby-jwt vulnerability