The json-jwt gem before 1.11.0 for Ruby lacks an element count during the splitting of a JWE string.
CVSS Metrics
