composer

lcobucci/jwt

Security advisories for lcobucci/jwt, newest first. 1 known, all fixed. If you’re on 4.1.5 or later, none of them affect you.

RSS feed Check your lock file →

Latest version

5.6.1

Advisories

1 · 0 unfixed

Last advisory

28 Sep 2021

Safe from

4.1.5

1 advisory · newest first

MODERATE4.4 28 Sep 2021

CVE-2021-41106: File reference keys leads to incorrect hashes on HMAC algorithms

GHSA-7322-jrq4-x5hf · CVE-2021-41106

Affected

≥ 3.4.0, < 3.4.6 ≥ 4.0.0, < 4.0.4 ≥ 4.1.0, < 4.1.5

Fixed in

3.4.6 4.0.4 4.1.5

Published

28 Sep 2021

/advisories/composer/lcobucci/jwt/feed.rss

From Packagist and the GitHub advisory database · synced hourly

Know when your sites are affected.

Porro reads composer.lock and package-lock from every site on your care plans and puts the ones that need you at the top. Updates arrive as pull requests.

Start your free trial →