CVE-2025-45769 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

php-jwt v6.11.0 was discovered to contain weak encryption. NOTE: this issue has been disputed on the basis that key lengths are expected to be set by an applica…
Medium CVSS: 6.5

CVE-2025-45769

php-jwt v6.11.0 was discovered to contain weak encryption. NOTE: this issue has been disputed on the basis that key lengths are expected to be set by an application, not by this library. This dispute is subject to review under CNA rules 4.1.4, 4.1.14, and other rules; the dispute tagging is not meant to recommend an outcome for this CVE Record.
Vendor
Google
Product
Firebase Php-jwt
CWE
CWE-326
Yayın Tarihi
2025-07-31 20:15:33
Güncelleme
2026-02-18 22:16:24
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

CWE-326 Firebase Php-jwt MEDIUM Google 2025

Referanslar

https://gist.github.com/ZupeiNie/83756316c4c24fe97a50176a92608db3 https://github.com/advisories/GHSA-2x45-7fc3-mxwq https://github.com/firebase https://github.com/firebase/php-jwt https://github.com/firebase/php-jwt/issues/620 https://github.com/firebase/php-jwt/pull/613 https://github.com/firebase/php-jwt/releases/tag/v7.0.0 https://github.com/github/advisory-database/pull/6954