A vulnerability marked as problematic has been reported in appsup-dart jose up to 0.3.5+0. This issue affects some unknown processing of the component JWS/JWT. Performing a manipulation results in improper verification of cryptographic signature.
This vulnerability is known as CVE-2026-34240. Remote exploitation of the attack is possible. No exploit is available.
It is suggested to upgrade the affected component.
