| Version | Supported |
|---|---|
| 4.2.x | ✅ |
| < 4.2.0 | ❌ |
If you think you have found a security issue, DO NOT open an issue. You MUST email your issue: security AT spomky-labs.com.
Repository navigation
Security: web-token/jwt-framework
Security
SECURITY.md
-
RSA-OAEP accepts an encrypted key made of several RSA blocks, enabling recovery of another JWE's content encryption key through a decryption oracleGHSA-wwcr-82mc-w3pw published
Nov 8, 2026 by SpomkyModerate -
ECDH-ES: an oversized "epk" coordinate costs seconds to minutes of CPU per token when PHP has no GMP extensionGHSA-wwq7-mh3q-hwrh published
Nov 8, 2026 by SpomkyHigh -
RSA keys of any size are accepted: a key chosen by the sender of a token costs seconds of CPU per operation (RSA-PSS and RSA encryption, and every RSA algorithm without GMP)GHSA-96f8-m4jr-72xj published
Nov 8, 2026 by SpomkyHigh -
dir, ECDH-ES and ECDH-SS accept a non-empty JWE Encrypted Key, so token strings are malleableGHSA-5cc5-v8qv-6cw7 published
Nov 8, 2026 by SpomkyLow -
AES key wrapping accepts oct keys shorter than the algorithm key size and pads them with zero bytes: an empty key wraps every CEK under an all-zero keyGHSA-4mxj-75j2-j8hc published
Nov 8, 2026 by SpomkyModerate -
Rejected JWE tokens write decryption keys into exception stack traces (4.2.1 to 4.2.5)GHSA-7hp7-mg7x-hww4 published
Nov 8, 2026 by SpomkyModerate -
Direct encryption (dir) does not check the key size: with a key of half the required size, AES-CBC-HMAC content is encrypted under an all-zero AES key and anyone holding the token can read itGHSA-jc6j-46g2-xwqc published
Nov 8, 2026 by SpomkyHigh -
RSA private key recoverable through a timing side channel in RSA-OAEP and RSA1_5 decryptionGHSA-2qpx-pwmq-r27r published
Nov 8, 2026 by SpomkyHigh -
Denial of service: parsing a JWS in the JSON General serialization takes a time quadratic in its number of signaturesGHSA-jgv7-g4jg-6hqv published
Nov 8, 2026 by SpomkyHigh -
JWS and JWE serializers decode attacker-controlled JSON without bounds before verification (CPU and memory denial of service)GHSA-2xq2-pp89-x7fr published
Nov 8, 2026 by SpomkyHigh
Learn more about advisories related to web-token/jwt-framework in the GitHub Advisory Database