lcobucci jwt Weak Encryption Vulnerability

A vulnerability exists in lcobucci jwt versions through 5.4.3, where the HMAC and RSA key lengths used in the JSON Web Signature (JWS) implementation are inadequate, failing to meet recommended security standards. This weakness can lead to serious vulnerabilities and potential attacks, as shorter keys can be more easily compromised.

Impact

The weak encryption can allow attackers to exploit the vulnerability by compromising the integrity of the tokens, potentially leading to unauthorized access or actions.