Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:gem/json-jwt@1.15.3.1
purl pkg:gem/json-jwt@1.15.3.1
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-s8ex-dtq7-qbdk The json-jwt (aka JSON::JWT) gem 1.16.3 for Ruby sometimes allows bypass of identity checks via a sign/encryption confusion attack. For example, JWE can sometimes be used to bypass JSON::JWT.decode. CVE-2023-51774
GHSA-c8v6-786g-vjx6

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-12T15:48:14.959357+00:00 GitLab Importer Fixing VCID-s8ex-dtq7-qbdk https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/json-jwt/CVE-2023-51774.yml 38.6.0
2026-06-12T07:42:19.125872+00:00 GithubOSV Importer Fixing VCID-s8ex-dtq7-qbdk https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/02/GHSA-c8v6-786g-vjx6/GHSA-c8v6-786g-vjx6.json 38.6.0
2026-06-11T20:34:04.898295+00:00 GHSA Importer Fixing VCID-s8ex-dtq7-qbdk https://github.com/advisories/GHSA-c8v6-786g-vjx6 38.6.0