Filtered by vendor Networknt Subscriptions
Filtered by product Light-oauth2 Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2023-31580 1 Networknt 1 Light-oauth2 2024-11-21 5.9 Medium
light-oauth2 before version 2.1.27 obtains the public key without any verification. This could allow attackers to authenticate to the application with a crafted JWT token.