Skip to content

web-token/jwt-bundle vulnerabilities (Packagist)

1 vulnerability.

web-token/jwt-bundle PackagistPHP JWT Framework: JWSVerifier uses algorithm from unprotected header, enabling algorithm confusion attacksGHSA-jc38-x7x8-2xc8Fix available8.1 HighJune 18, 2026