GCVE - cpe:2.3:a:packback:lti_1.3_tool

Approved changes feed: RSS · Atom

cpe:2.3:a:packback:lti_1.3_tool_library:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Packback (`68df9b04-14e0-5ce3-8cc7-72fccace219c`)
Product	Lti 1.3 Tool Library (`7bb79c5a-28af-5e37-b014-aaa9a25c0cca`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from purl2cpe mapping

PURL	Source	Last updated
`pkg:github/imsglobal/lti-1-3-php-library`	purl2cpe	2026-06-01 10:16:52.462360
`pkg:github/packbackbooks/lti-1-3-php-library`	purl2cpe	2026-06-01 10:16:52.462363

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-31158`	vulnerable	2026-06-08 05:43:40.300327	Authentication Bypass by Capture-replay in packbackbooks/lti-1-3-php-library HIGH (7.5) LTI 1.3 Tool Library is a library used for building IMS-certified LTI 1.3 tool providers in PHP. Prior to version 5.0, the Nonce Claim Value was not being validated against the nonce value sent in the Authentication Request. Users should upgrade to version 5.0 to receive a patch. There are currently no known workarounds. Published: 2022-07-15T17:15:12.000Z Updated: 2025-04-23T17:58:17.098Z Open on db.gcve.eu Reference links https://github.com/packbackbooks/lti-1-3-php-library/security/advisories/GHSA-5p73-qg2v-383h	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-31157`	vulnerable	2026-06-08 05:43:40.299802	Use of a Broken or Risky Cryptographic Algorithm in packbackbooks/lti-1-3-php-library HIGH (7.5) LTI 1.3 Tool Library is a library used for building IMS-certified LTI 1.3 tool providers in PHP. Prior to version 5.0, the function used to generate random nonces was not sufficiently cryptographically complex. Users should upgrade to version 5.0 to receive a patch. There are currently no known workarounds. Published: 2022-07-15T17:15:21.000Z Updated: 2025-04-23T17:58:11.075Z Open on db.gcve.eu Reference links https://github.com/packbackbooks/lti-1-3-php-library/security/advisories/GHSA-768m-5w34-2xf5	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.