PHP JWT Framework: JWSVerifier uses algorithm from unprotected header, enabling algorithm confusion attacks
High severity
GitHub Reviewed
Published
Jun 6, 2026
in
web-token/jwt-framework
•
Updated Jul 6, 2026
Give feedback on Dependabot alerts