JsonWebToken Security Bug Opens Servers to RCE The JsonWebToken package plays a big role in the authentication and authorization functionality for many applications.

A report from Palo Alto Networks’ cybersecurity arm, Unit 42 outlined how the flaw would allow the server to verify a maliciously crafted JSON web token (JWT) request, thus granting the ...