Description
JPaseto before 0.3.0 generates weak hashes when using v2.local tokens.
Remediation
References
https://github.com/paseto-toolkit/jpaseto/releases/tag/jpaseto-0.3.0
Related Vulnerabilities
CVE-2022-36437 Vulnerability in maven package com.hazelcast:hazelcast
CVE-2016-10597 Vulnerability in npm package cobalt-cli
CVE-2014-0364 Vulnerability in maven package org.igniterealtime.smack:smack
CVE-2019-16552 Vulnerability in maven package com.sonyericsson.hudson.plugins.gerrit:gerrit-trigger