Skip to Content (Press Enter)
2020-01-15 15-27-27
Lucas Carvalho Miranda
24Views
0Comments
[JWT] [JWT] Security Vulnerability CVE-2024-30172 -  BouncyCastle.Crypto
Question
Forge
OutSystems 11
Security
Service
jwt
Service icon
JWT (O11)
Forge asset by João Almeida
Application Type
Service

Hi, Hope you all are doing well.


We had a report of vulnerability CVE-2024-30172 on use of BouncyCastle.Crypto, version 1.8.9. Even thought we updated to JWT version 4.1.10 and the component already updated to BouncyCastle.Cryptography.dll 2.6.2, it was constantly on reports.

At extension JWTCore, file BouncyCastle.Crypto and references still remain, so I removed, published and solved the issue.

Its possible to remove BouncyCastle.Crypto on further versions?

Thanks.

1
0
17 Oct 2025
Copy Link
Community GuidelinesBe kind and respectful, give credit to the original source of content, and search for duplicates before posting.