LI
Vendor
Libjwt
2
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-33996 | LI Libjwt Libjwt | 5.5 | Mar 27 | LibJWT has NULL/bounds validation in JWK octet and RSA PSS parsing |
| CVE-2024-25189 | LI Libjwt Libjwt | 9.8 | Feb 8 | libjwt 1.15.3 uses strcmp (which is not constant time) to verify authentication, which makes it easier to bypass authentication via a timing side channel |