Zihanggao Php-jwt — known CVE vulnerabilities

Every CVE whose affected-product data names Zihanggao Php-jwt, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (1)

• CVE-2024-25191 — CVSS 9.8 (critical): php-jwt 1.0.0 uses strcmp (which is not constant time) to verify authentication, which makes it easier to bypass authentication via a…