ニュース

InfoWorld8年

Critical flaw alert! Stop using JSON encryption - InfoWorld

Cryptography experts have advised against developers using JSON Web Encryption (JWE) in their applications in the past, and this vulnerability illustrates those very dangers.
Threat Post8年

JSON Libraries Patched Against Invalid Curve Crypto Attack

JSON libraries using the JWE specification to create, sign and encrypt access tokens have been patched against an attack that allows for the recovery of a private key.
ITmedia2年

人気のJSON Webトークンライブラリに脆弱性 影響範囲 ...

2万超えるプロジェクトがライブラリを使用 その影響範囲は JsonWebTokenとは、承認や認証の目的で使われるJSON Webトークンの検証や署名を行う ...
ZDNet12年

Developers getting JSON-based options for enterprise authentication

JOSE can incorporate a number of features, including JSON Web Signature (JWS), JSON Web Encryption (JWE), JSON Web Token (JWT), and JSON Web Key (JWK).
Dark Reading2年

JsonWebToken Security Bug Opens Servers to RCE - Dark Reading

JsonWebToken Security Bug Opens Servers to RCE The JsonWebToken package plays a big role in the authentication and authorization functionality for many applications.