Firebase Php-jwt (Google) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 36 known versions, newest CVE from 2025-07-31. Vendor: Google.

CVEs of Firebase Php-jwt

• CVE-2025-45769 - CVSS 6.5 (medium), 2025-07-31: php-jwt v6.11.0 was discovered to contain weak encryption. NOTE: this issue has been disputed on the basis that key lengths are expected to be set by an…
• CVE-2021-46743 - CVSS 9.1 (critical), 2022-03-29: In Firebase PHP-JWT before 6.0.0, an algorithm-confusion issue (e.g., RS256 / HS256) exists via the kid (aka Key ID) header, when multiple types of keys are…