Threats affecting pkg:composer/kelvinmo/simplejwt

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.5	EPSS 0.5%	CVE-2026-33204kelvinmo simplejwt · Uncontrolled Resource Consumption High7.5EPSS 0.5%2026-03-20CVE Database V5CVE-2026-33204 SimpleJWT is a simple JSON web token library written in PHP. Prior to version 1.1.1, an unauthenticated attacker can perform a Denial of Service via JWE header tampering when PBES2 algorithms are used. Applications that call JWE::decrypt() on attacker-controlled JWEs using PBES2 algorithms are affected. This issue has been patched in version 1.1.1. EPSS 0.5%Vulnerability CWE-400	CVE Database V5	2026-03-20

Page 1 of 1