kelvinmo/simplejwt

Releases43

Frequency3 months 16 hours

Last Release about 2 months ago

Stars70

A simple JSON web token library written in PHP.

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2026-33204 ↗	Mar 20, 2026Friday, 20 March 2026, 23:16	7.5 HIGH	—
SimpleJWT is a simple JSON web token library written in PHP. Prior to version 1.1.1, an unauthenticated attacker can perform a Denial of Service via JWE header tampering when PBES2 algorithms are used. Applications that call JWE::decrypt() on attacker-controlled JWEs using PBES2 algorithms are affected. This issue has been patched in version 1.1.1.