CVE-2019-19324: Xmidt Cjwt

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

Xmidt cjwt through 1.0.1 before 2019-11-25 maps unsupported algorithms to alg=none, which sometimes leads to untrusted accidental JWT acceptance.

Affected products

• Xmidt Cjwt: from 1.0.1, before 2019-11-25 (fixed in 2019-11-25)

Published 2020-03-20. Last modified 2026-06-17.