ECDSA.transcodeSignatureToDER ignores the last byte of an odd signature

[Former user]

This is a security hole since it also validates all of the tokens whose signature is composed of a valid signature and one more character

[Connect2id OSS]

For the ticket, could you provide more details / context / proof?

[Vladimir Dzhuvinov]

Duplicate of #399.