AIKIDO-2026-10617

TL;DR

Affected versions of this package are vulnerable to multiple security issues. EC public keys used for JWE and JWK import are accepted without verifying that the point lies on the configured curve, exposing the recipient to invalid-curve attacks that can leak shared-secret bits. The helper that produces a public JWK set also copies symmetric (HMAC) keys through unchanged, leaking secret material when the result is published. The fast JWT signing path additionally inserts the key ID and algorithm name into the protected header without escaping, allowing crafted values to inject extra or malformed header fields.