Skip to content
OpenAdvisories
Critical DLA-3739-1 1 CVE

libjwt - security update

Published Feb 24, 2024 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 10 libjwt 1.10.1-1+deb10u1

Vulnerabilities 1

  • Critical 9.8

    libjwt 1.15.3 uses strcmp (which is not constant time) to verify authentication, which makes it easier to bypass authen…