JWE Issue

[ghost]

Dear Mr. Hedberg, I tried to inform you a while ago in a confidential way by sending you details about the issue to your listed email address "[email protected]". I hope you recognised it, as it is currently not possible to exploit it without changes to be conform to the specification. Despite that, the issue remains and in case users corrected it to be conform and use the functionality as intended, they would be vulnerable to the issue. I hesitated with publicly mention it without an answer from you, but as there is no response, I will let you another three month until the defails will be available to inform about the issue. Best regards