composer

firebase/php-jwt

Security advisories for firebase/php-jwt, newest first. 3 known, all fixed. If you’re on 7.0.0 or later, none of them affect you.

RSS feed Check your lock file →

Latest version

7.2.1

Advisories

3 · 0 unfixed

Last advisory

31 Jul 2025

Safe from

7.0.0

3 advisories · newest first

LOW6.5 31 Jul 2025

php-jwt contains weak encryption

GHSA-2x45-7fc3-mxwq · CVE-2025-45769

Affected

< 7.0.0

Fixed in

7.0.0

Published

31 Jul 2025

CRITICAL9.1 30 Mar 2022

Key/algorithm type confusion

GHSA-8xf4-w7qw-pjjw · CVE-2021-46743

Affected

< 6.0.0

Fixed in

6.0.0

Published

30 Mar 2022

CRITICAL 2 Apr 2015

Critical vulnerabilities in JSON Web Token libraries

PKSA-9g4f-46cc-2gr4

Affected

< 2.0.0

Fixed in

2.0.0

Published

2 Apr 2015

/advisories/composer/firebase/php-jwt/feed.rss

From Packagist and the GitHub advisory database · synced hourly

Know when your sites are affected.

Porro reads composer.lock and package-lock from every site on your care plans and puts the ones that need you at the top. Updates arrive as pull requests.

Start your free trial →