One of the criticisms of the JOSE/JWT standards is that they give an attacker too much flexibility, by allowing them to specify how a message should be processed. In particular, the standard “…| Neil Madden
Which libraries are vulnerable to attacks and how to prevent them.| Auth0 - Blog