smallrye-jwt vulnerabilities

CVEs whose affected-version data names the smallrye-jwt package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-81829Medium· 5.3

5d ago

A flaw was found in SmallRye JWT's AwsAlbKeyResolver, which is used by applications to verify JSON Web Tokens signed by AWS Application Load Balancers

A flaw was found in SmallRye JWT's AwsAlbKeyResolver, which is used by applications to verify JSON Web Tokens signed by AWS Application Load Balancers. When the AWS_ALB key provider is configured, the resolver constructs the key-fetch UR…

▾ SunlitRed Hat · exploit-intelligence/agent-client-rhel9EPSS 0.39%via NVD