Description
JPaseto before 0.3.0 generates weak hashes when using v2.local tokens.
Remediation
References
https://github.com/paseto-toolkit/jpaseto/releases/tag/jpaseto-0.3.0
Related Vulnerabilities
CVE-2018-1000864 Vulnerability in maven package org.jenkins-ci.main:jenkins-core
CVE-2020-11988 Vulnerability in maven package org.apache.xmlgraphics:xmlgraphics-commons
CVE-2014-3600 Vulnerability in maven package org.apache.activemq:activemq-broker
CVE-2023-30515 Vulnerability in maven package io.jenkins.plugins:thycotic-devops-secrets-vault
CVE-2017-16113 Vulnerability in maven package org.webjars.npm:parsejson