Fix for GHSA-gg9x-qcx2-xmrh#190

Open

keycard-gh-workflows-access[bot] wants to merge 1 commit into

mainfrom

socket/fix/GHSA-gg9x-qcx2-xmrh

Commits on Jul 9, 2026

fix: GHSA-gg9x-qcx2-xmrh - joserfc: HS256/HS384/HS512 verify accepts empty/nil HMAC key (cross-language sibling of CVE-2026-45363)
github-actions[bot]
committed