New swiyu Generic Verifier

less than 1 minute read

We released a new version of our Generic Verifier due to a security vulnerability.

Generic Verifier Version 4.1.2

🚨 Critical vulnerability fix VC Authorization Bypass, upgrade ASAP
Trust validation is now bound to the DID from the kid header (actual signer) instead of the iss claim
See Change Dossier CD-008 for full details on the vulnerability, root cause, and timeline
For more details, please refer to the changelog

There are no breaking changes associated with this fix, so no specific migration steps are necessary.