Approved changes feed: RSS · Atom
cpe:2.3:a:kelvinmo:simplejwt:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Kelvinmo (0b25e6a7-cce0-52f4-ae22-ee9148be9778) |
|---|---|
| Product | Simplejwt (2e2f104f-e03f-54f8-8b27-3564b2ea41e0) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:composer/kelvinmo/simplejwt |
purl2cpe | 2026-06-01 10:12:47.544342 |
pkg:github/kelvinmo/simplejwt |
purl2cpe | 2026-06-01 10:12:47.544344 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-33204 |
vulnerable | 2026-06-08 07:59:09.344524 |
SimpleJWT has an Unauthenticated Denial of Service via JWE header tampering
HIGH (7.5)
SimpleJWT is a simple JSON web token library written in PHP. Prior to version 1.1.1, an unauthenticated attacker can perform a Denial of Service via JWE header tampering when PBES2 algorithms are used. Applications that call JWE::decrypt() on attacker-controlled JWEs using PBES2 algorithms are affected. This issue has been patched in version 1.1.1.
Published: 2026-03-20T22:37:13.411Z
Updated: 2026-03-24T15:34:35.165Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.