CVE-2024-25189

Name of the Vulnerable Software and Affected Versions libjwt version 1.15.3

Description The issue arises from the use of strcmp to verify authentication, which is not a constant time operation. This makes it easier for attackers to bypass authentication via a timing side channel.

Recommendations For libjwt version 1.15.3, consider updating to a version that uses constant time string comparison to mitigate the risk of timing side channel attacks.