Skip to Content (Press Enter)
2017-03-28 10-50-47
Paul.
16Views
0Comments
[JWT] Vulnerability found in Forge Component
Question
Forge
OutSystems 11
Security
Service
jwt
Service icon
JWT (O11)
Forge asset by João Almeida
Application Type
Service

Hi there Maxime,A vulnerability was found in the recent version of the Forge Component JWT v4.1.11It contains the  libraries BouncyCastle.Crypto v1.8.9 and JWT v 1.3.3 which contain vulnerabilities.

BouncyCastle.Cryptohttps://nvd.nist.gov/vuln/detail/CVE-2020-26939

&

JWT 1.3.3 is an old and unsupported version of the jwt-dotnet library and is flagged by NuGet as having known security vulnerabilities. Any chance a new version on the .net library can be implemented in your Forge Component?Thank you 

0
0
13 Jul
Copy Link
Community GuidelinesBe kind and respectful, give credit to the original source of content, and search for duplicates before posting.