UpHeron
All vulnerabilities

Packagist

CVE-2025-45769

php-jwt contains weak encryption

Severity
Low 6.5
Published
31 Jul 2025
Last changed
10 Sept 2026
Added to UpHeron
22 Oct 2026
Fixed in
7.0.0
Also known as
GHSA-2x45-7fc3-mxwq
Sources
OSV.dev and GitHub

Affected software

SoftwareAffected versions
firebase/php-jwtPackagist · osv:Packagist:firebase/php-jwt
  • Every version before 7.0.0

References