jwt-2.10.3

anakinj released this 22 May 15:42

a52e81d

v2.10.3 (2026-05-22)

Fixes and enhancements:

Backport: Reject nil and empty HMAC keys when signing and verifying (CVE-2026-45363 / GHSA-c32j-vqhx-rx3x) #725 (@royzwambag)

Assets 2