1. connect2id Avatar connect2id
  2. Crypto
  3. Nimbus-JOSE-JWT

Issues

Filter by:

Advanced search

Issues (1–25 of 28)

Title T P Status Votes Assignee Milestone Created Updated Actions
#548: Multi Release Jar broken
bug critical resolved
#524: getClaims method returns different output between 9.10 and 9.31 versions
JWT
bug critical wontfix 1
#516: Insecure encryption mode CBC with PKCS5
Crypto package
bug critical wontfix
#466: JWT contains the aud as a string when there is only one aud value
JWT
enhancement critical wontfix
#486: Invalid JWS header,The algorithm "alg" header parameter must be for signatures
JWT
bug critical invalid
#366: Caused by: com.nimbusds.jose.proc.BadJOSEException: JOSE header "typ" (type) "at+jwt" not allowed
JOSE Core
bug critical invalid
#467: Prevent construction and parsing of JWS and JWE headers with non-public jwk parameter
bug critical resolved
#459: Shaded version of json-smart 1.3.1 has critical vulnerability
bug critical invalid
#450: StandardCharset is now broken
bug critical resolved
#434: Catch StackOverflowErrors in JSONObjectUtils.parse(String, int)
bug critical resolved
#425: Parsing a JOSE header with a very large number of nested JSON objects can cause a StackOverflowError
JOSE Core
bug critical resolved
#416: Bump json-smart to 2.4.2 for 8.x
enhancement critical resolved 1
#413: Remove json-smart dependency that have reported severe CVE-2021-27568
enhancement critical wontfix
#415: Decrytion Error After an elapsed time
JWT
bug critical invalid
#411: Json-smart critical vulnerability - CVE-2021-27568
JWT
bug critical invalid
#363: JWK.parse with missing "kty" must throw ParseException
bug critical resolved
#346: Incorrect hashCode / equals implementation in JWK, RSAKey
JWK
bug critical new
#342: IOUtils.readFileToString must close FileInputStream after usage to release resources
bug critical resolved 1
#321: JWS verification throws exception
bug critical invalid
#293: JWT aud claim changing array to string for single value
JWT
enhancement critical resolved
#232: Incorrect X509CertUtils#computeSHA256Thumbprint
bug critical resolved
#226: JWK Constructor erroneously throws IllegalArgumentException
JWK
bug critical resolved
#223: AESCBC return immediately on invalid HMAC
bug critical resolved
#222: JWE Vulnerability: Cannot force Content type to be JWT when processing an encrypted JWT
bug critical invalid
#185: Android: com.nimbusds.jose.JOSEException: Couldn't create AES/GCM/NoPadding cipher: unknown parameter type
JOSE Core
bug critical resolved
  2. 1
  3. 2