diff --git a/gems/json-jwt/CVE-2023-51774.yml b/gems/json-jwt/CVE-2023-51774.yml index b9b943e8b9..5f32f987d7 100644 --- a/gems/json-jwt/CVE-2023-51774.yml +++ b/gems/json-jwt/CVE-2023-51774.yml @@ -10,6 +10,7 @@ description: | bypass of identity checks via a sign/encryption confusion attack. For example, JWE can sometimes be used to bypass JSON::JWT.decode. patched_versions: + - "~> 1.15.3, >= 1.15.3.1" - ">= 1.16.6" related: url: