Google Firebase Php-Jwt
2 CVEs affecting Google Firebase Php-Jwt. Latest disclosed: 2025-07-31. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-46743 | Critical | 9.1 | 2022-03-29 | In Firebase PHP-JWT before 6.0.0, an algorithm-confusion issue (e.g., RS256 / HS256) exists via the kid (aka Key ID) header, when multiple types of keys are lo… |
CVE-2025-45769 | Medium | 6.5 | 2025-07-31 | php-jwt v6.11.0 was discovered to contain weak encryption. NOTE: this issue has been disputed on the basis that key lengths are expected to be set by an applic… |