https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T06:09:33.901564+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-33204 CVE-2026-33204 — SimpleJWT has an Unauthenticated Denial of Service via JWE header tampering 2026-10-09T06:09:33.902702+00:00

Affected: kelvinmo simplejwt

SimpleJWT is a simple JSON web token library written in PHP. Prior to version 1.1.1, an unauthenticated attacker can perform a Denial of Service via JWE header tampering when PBES2 algorithms are used. Applications that call JWE::decrypt() on attacker-controlled JWEs using PBES2 algorithms are affected. This issue has been patched in version 1.1.1.