Back to Security Advisories

Ruby-Jwt Vulnerability — Ubuntu Security Update (USN-9059-1)

High
Ubuntu 20.04 Ubuntu 22.04

It was discovered that ruby-jwt incorrectly verified HMAC signatures when
the verification key was empty or missing. A remote attacker could possibly
use this issue to forge tokens and bypass authentication.

Check your system for vulnerabilities

Select your product and operating system to see the exact fix commands that apply to you.

Check Your System