jwt Summary

Latest vulnerabilities published by jwt

JSON RSS CSV 🔔 Create Alert Trigger

8 August 2025

Brute Force Vulnerability in Ruby JSON Web Encryption Implementation by JWT
CVE-2025-54887
JwtRuby-jwe👾🟡9.1CRITICAL

7 August 2025

Weak Encryption in Ruby JWT Library Impacting Security Frameworks
CVE-2025-45765
JWT LLCruby-jwt9.1CRITICAL

21 March 2025

Security Flaw in golang-jwt JSON Web Token Library Affecting Multiple Versions
CVE-2025-30204
Golang-jwtJwt7.5HIGH

4 November 2024

updates to fix incorrect error handling
CVE-2024-51744
Golang-jwtJwt3.1LOW

8 February 2024

Timing Side Channel Vulnerability in php-jwt
CVE-2024-25191
php-jwtPHP-jwt9.8CRITICAL

30 September 2020

Access Restriction Bypass in jwt-go Library
CVE-2020-26160
Jwt-go ProjectJwt-go7.5HIGH

12 November 2019

JWE String Processing Flaw in json-jwt Gem for Ruby by Nov
CVE-2019-18848
Json-jwt ProjectJson-jwt7.5HIGH

25 July 2019

Incorrect Access Control in JWT Security Token for perl-CRYPT-JWT by DCIT
CVE-2019-1010161
Perl-crypt-jwtPerl-crypt-jwt9.8CRITICAL

17 July 2019

Incorrect Access Control in Perl Crypt::JWT Affecting DCIT Software
CVE-2019-1010263
Perl Crypt::jwtPerl Crypt::jwt9.8CRITICAL

26 June 2018

Improper Cryptographic Signature Verification in Nov json-jwt Component
CVE-2018-1000539
Json-jwt ProjectJson-jwt5.3MEDIUM

18 March 2018

Time-Sensitive Vulnerability in Authentikat JWT Library by Jason Goodwin
CVE-2017-18239
Authentikat-jwt P...Authentikat-jwt9.8CRITICAL

23 January 2017

Timing Attack Vulnerability in JWT Library by Malcolm Fell
CVE-2016-7037
Jwt ProjectJwt7.5HIGH