Filtered by vendor Emarref Subscriptions
Filtered by product Jwt Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2016-7037 1 Emarref 1 Jwt 2025-11-18 N/A
The verify function in Encryption/Symmetric.php in Malcolm Fell jwt before 1.0.3 does not use a timing-safe function for hash comparison, which allows attackers to spoof signatures via a timing attack.