Skip to content
OpenAdvisories

Package · Debian

libjwt3

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.8
    CVE-2026-33996

    LibJWT has NULL/bounds validation in JWK octet and RSA PSS parsing

    LibJWT is a C JSON Web Token Library. Starting in version 3.0.0 and prior to version 3.3.0, the JWK parsing for RSA-PSS did not protect against a NULL value when expecting to parse JSON string values. A specially crafted JWK file could exploit this behavior b…

    benmcollins libjwt libjwt libjwt3 Debian Ubuntu