Skip to content
OpenAdvisories

Product · kelvinmo

simplejwt

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-33204

    SimpleJWT has an Unauthenticated Denial of Service via JWE header tampering

    SimpleJWT is a simple JSON web token library written in PHP. Prior to version 1.1.1, an unauthenticated attacker can perform a Denial of Service via JWE header tampering when PBES2 algorithms are used. Applications that call JWE::decrypt() on attacker-control…

    kelvinmo simplejwt kelvinmo/simplejwt Packagist