nov / json-jwt

JSON Web Token and its family (JSON Web Signature, JSON Web Encryption and JSON Web Key) in Ruby
MIT License
299 stars 80 forks source link

Backport fix for CVE-2023-51774 from 1.16.6 to 1.15.x #122

Closed Capncavedan closed 6 months ago

Capncavedan commented 6 months ago

@nov this backports your fix to a branch created from the last commit on 1.15.x. I also added a test for the fix.

Refs https://github.com/nov/json-jwt/issues/121

nov commented 6 months ago

target branch is main

nov commented 6 months ago

v1.15.3.1 is released