SHARE
Facebook X Pinterest WhatsApp

Critical Vulnerabilities Affect JSON Web Token Libraries for JavaScript and PHP

Apr 2, 2015

JWT is now a standard which produces tokens between two parties allowing a server to produce an admin token, transferred in JSON, and then signed by the server’s key which allows clients to then go on to use that token in order to verify the user is logged in as an admin. Now a Canadian security researcher, Tim McLean who specializes in cryptography has unearthed the issues, points out that attackers could exploit one of those vulnerabilities, which abuses an asymmetric signing algorithm present in some JWT libraries. Continue reading this story here.

Recommended for you...

Web 3.0 and the Future Of Web Development
Rob Gravelle
Jun 23, 2022
CodeGuru and VBForums Developer Forums and Community
James Payne
Apr 7, 2022
Understanding CSS Template Layout
Vipul Patel
Mar 29, 2022
Criminals Pay More for Code Signing Certificates Than for Guns or Passports
HTML Goodies Logo

The original home of HTML tutorials. HTMLGoodies is a website dedicated to publishing tutorials that cover every aspect of being a web developer. We cover programming and web development tutorials on languages and technologies such as HTML, JavaScript, and CSS. In addition, our articles cover web frameworks like Angular and React.JS, as well as popular Content Management Systems (CMS) that include WordPress, Drupal, and Joomla. Website development platforms like Shopify, Squarespace, and Wix are also featured. Topics related to solid web design and Internet Marketing also find a home on HTMLGoodies, as we discuss UX/UI Design, Search Engine Optimization (SEO), and web dev best practices.

Property of TechnologyAdvice. © 2025 TechnologyAdvice. All Rights Reserved

Advertiser Disclosure: Some of the products that appear on this site are from companies from which TechnologyAdvice receives compensation. This compensation may impact how and where products appear on this site including, for example, the order in which they appear. TechnologyAdvice does not include all companies or all types of products available in the marketplace.