38 matches found
CLSA-2026-1788348158 TuxCare security update for firebase/php-jwt (1 CVE)
TuxCare rebuilt firebase/php-jwt to address 1 CVE. Fixed in v5.5.1-p1+tuxcare...
CLSA-2026-1769734644 TuxCare security update for firebase/php-jwt (1 CVE)
TuxCare rebuilt firebase/php-jwt to address 1 CVE. Fixed in 6.11.1-p2+tuxcare...
[R2] Security Center Version 6.8.0 Fixes Multiple Vulnerabilities
R2 Security Center Version 6.8.0 Fixes Multiple Vulnerabilities Arnie Cabral Wed, 02/18/2026 - 08:32 Security Center leverages third-party software to help provide underlying functionality. Several of the third-party components libssh, postgresql were found to contain vulnerabilities, and updated...
EUVD-2025-23305
Malicious code in bioql PyPI...
EUVD-2024-22527
Malicious code in bioql PyPI...
EUVD-2022-1387
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2024-25191
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - php-jwt 1.0.0 uses strcmp which is not constant time to verify authentication, which makes it easier to bypass authentication via a timing side channel...
CVE-2025-45769
php-jwt v6.11.0 was discovered to contain weak encryption. NOTE: this issue has been disputed on the basis that key lengths are expected to be set by an application, not by this library. This dispute is subject to review under CNA rules 4.1.4, 4.1.14, and other rules; the dispute tagging is not...
php-jwt contains weak encryption
php-jwt v6.11.0 was discovered to contain weak encryption...
GHSA-2X45-7FC3-MXWQ php-jwt contains weak encryption
php-jwt v6.11.0 was discovered to contain weak encryption...
Inadequate Encryption Strength
Overview Affected versions of this package are vulnerable to Inadequate Encryption Strength due to the HMAC and RSA key lengths used in the JSON Web Signature JWS implementation not meeting recommended security standards. Remediation Upgrade firebase/php-jwt to version 7.0.0 or higher. References...
CVE-2025-45769
php-jwt v6.11.0 was discovered to contain weak encryption. NOTE: this issue has been disputed on the basis that key lengths are expected to be set by an application, not by this library. This dispute is subject to review under CNA rules 4.1.4, 4.1.14, and other rules; the dispute tagging is not...
CVE-2025-45769
php-jwt v6.11.0 was discovered to contain weak encryption. NOTE: this issue has been disputed on the basis that key lengths are expected to be set by an application, not by this library. This dispute is subject to review under CNA rules 4.1.4, 4.1.14, and other rules; the dispute tagging is not...
CVE-2025-45769: Inadequate Encryption Strength
php-jwt v6.11.0 was discovered to contain weak encryption. NOTE: this issue has been disputed on the basis that key lengths are expected to be set by an application, not by this library. This dispute is subject to review under CNA rules 4.1.4, 4.1.14, and other rules; the dispute tagging is not...
PT-2025-31584
Name of the Vulnerable Software and Affected Versions php-jwt version 6.11.0 Description php-jwt version 6.11.0 contains a cryptographic weakness. This weakness enables potential token manipulation. Recommendations At the moment, there is no information about a newer version that contains a fix f...
CVE-2025-45769
php-jwt v6.11.0 was discovered to contain weak encryption. NOTE: this issue has been disputed on the basis that key lengths are expected to be set by an application, not by this library. This dispute is subject to review under CNA rules 4.1.4, 4.1.14, and other rules; the dispute tagging is not...
CVE-2025-45769
php-jwt v6.11.0 was discovered to contain weak encryption. NOTE: this issue has been disputed on the basis that key lengths are expected to be set by an application, not by this library. This dispute is subject to review under CNA rules 4.1.4, 4.1.14, and other rules; the dispute tagging is not...
CVE-2025-45769
The php-jwt library (version 6.11.0 ) was found to contain weak encryption . While the issue was disputed because key lengths are typically set by the application rather than the library, the vulnerability is addressed in certain distributions. For instance, TuxCare provided a rebuilt version fix...