1 known security vulnerability

  • highGHSA-c32j-vqhx-rx3x(CVE-2026-45363)

    ruby-jwt: Empty-key HMAC bypass; cross-language sibling of CVE-2026-44351

A pure ruby implementation of the RFC 7519 OAuth JSON Web Token (JWT) standard.

Required Ruby Version

>= 0

Authors

Jeff Lindsay, Tim Rudat

Versions

  1. 3.3.0

    1. source

      1. 3.3.0 source September 11, 2026 (56.5 KB)
  2. 3.2.0

    1. source

      1. 3.2.0 source May 13, 2026 (53.5 KB)
  3. 3.1.2

    1. source

      1. 3.1.2 source June 28, 2025 (52.5 KB)
  4. 3.1.1

    1. source

      1. 3.1.1 source June 24, 2025 (52.5 KB)
  5. 3.1.0

    1. source

      1. 3.1.0 source June 23, 2025 (52.5 KB)
  6. 1.5.5

    1. source

      1. 1.5.5 source September 16, 2016 (32 KB)
Show all versions (60 total)

SHA 256 checksum

← Previous version Next version →