web-token/jwt-experimental vulnerabilities

CVEs whose affected-version data names the web-token/jwt-experimental package (composer). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

GHSA-6vvh-pxr4-25r7Medium

PHP JWT Framework: Chacha20Poly1305 key-encryption algorithm discards the Poly1305 authentication tag, performing no authentication on decryption

PHP JWT Framework: Chacha20Poly1305 key-encryption algorithm discards the Poly1305 authentication tag, performing no authentication on decryption

▾ Sunlitweb-token · web-token/jwt-experimentalvia GHSA

web-token/jwt-experimental vulnerabilities (CVEs) · VulnSea