Libjwt vulnerabilities

Products

• Libjwt 2

Newest

• benmcollins libjwt LibJWT has NULL/bounds validation in JWK octet and RSA PSS parsing CVE-2026-33996 Fix available 5.8 MediumMarch 27, 2026
• libjwt, bencollins jwt c library, debian linux +2 more libjwt 1.15.3 uses strcmp (which is not constant time) to verify authentication, which makes it... CVE-2024-25189 Fix available 9.8 CriticalFebruary 8, 2024