| Package | Affected versions | Patched versions |
|---|---|---|
| firebase/php-jwt | < 2.0.0 | 2.0.0 |
Several widely-used JSON Web Token (JWT) libraries, including node-jsonwebtoken, pyjwt, namshi/jose, php-jwt, and jsjwt, are affected by critical vulnerabilities that could allow attackers to bypass the verification step when using asymmetric keys (RS256, RS384, RS512, ES256, ES384, ES512).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free