Skip to content
OpenAdvisories

Vendor

kelvinmo

2 known vulnerabilities.

Products

simplexrd 1 simplejwt 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-33204

    SimpleJWT has an Unauthenticated Denial of Service via JWE header tampering

    SimpleJWT is a simple JSON web token library written in PHP. Prior to version 1.1.1, an unauthenticated attacker can perform a Denial of Service via JWE header tampering when PBES2 algorithms are used. Applications that call JWE::decrypt() on attacker-control…

    kelvinmo simplejwt kelvinmo/simplejwt Packagist