NVD CVE-2015-2951 (jwt) June 5, 2015 007admin JWT.php in F21 JWT before 2.0 allows remote attackers to bypass signature verification via crafted tokens.