Attackers able to impersonate users

PKSA-fnxt-v4r3-5pj3

Affected package: namshi/jose

Affected version: <1.1.2|>=1.2.0,<1.2.2|>=2.0.0,<2.0.3|>=2.1.0,<2.1.2

Reported by:
FriendsOfPHP/security-advisories