Emarref Jwt — known CVE vulnerabilities

Every CVE whose affected-product data names Emarref Jwt, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (1)

• CVE-2016-7037 — CVSS 7.5 (high): The verify function in Encryption/Symmetric.php in Malcolm Fell jwt before 1.0.3 does not use a timing-safe function for hash comparison…