{"action":"opened","issue":{"url":"https://api.github.com/repos/lexik/LexikJWTAuthenticationBundle/issues/57","labels_url":"https://api.github.com/repos/lexik/LexikJWTAuthenticationBundle/issues/57/labels{/name}","comments_url":"https://api.github.com/repos/lexik/LexikJWTAuthenticationBundle/issues/57/comments","events_url":"https://api.github.com/repos/lexik/LexikJWTAuthenticationBundle/issues/57/events","html_url":"https://github.com/lexik/LexikJWTAuthenticationBundle/issues/57","id":66281079,"number":57,"title":"Security vulnerability in namshi/jose","user":{"login":"dopgm","id":6718777,"avatar_url":"https://avatars.githubusercontent.com/u/6718777?v=3","gravatar_id":"","url":"https://api.github.com/users/dopgm","html_url":"https://github.com/dopgm","followers_url":"https://api.github.com/users/dopgm/followers","following_url":"https://api.github.com/users/dopgm/following{/other_user}","gists_url":"https://api.github.com/users/dopgm/gists{/gist_id}","starred_url":"https://api.github.com/users/dopgm/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dopgm/subscriptions","organizations_url":"https://api.github.com/users/dopgm/orgs","repos_url":"https://api.github.com/users/dopgm/repos","events_url":"https://api.github.com/users/dopgm/events{/privacy}","received_events_url":"https://api.github.com/users/dopgm/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2015-04-04T06:00:08Z","updated_at":"2015-04-04T06:00:08Z","closed_at":null,"body":"Hi,\r\n\r\nThis bundle uses \"namshi/jose\" version ~1.2 (1.2.2 as of April 4), however there's a note on namshi's page:\r\n\"Unsecure JWSes are disabled by default since version 2.1.2. You should not use previous versions other than 1.0.2, 1.1.2, 2.0.3 as they have a security vulnerability. More info here.\"\r\nAlso, not sure if related or not, but tokens provided by the LexikJWTAuthenticationBundle do not pass verification on jwt.io\r\n\r\nThank you!!\r\nD.O."}}