SecAlerts
CVE ListPricingSign Up
l

libjwt

Security Risk Profile

52
/100
medium

Security Risk Score

Comprehensive risk assessment based on 3 vulnerabilities, EPSS scores, exploitation status, and remediation availability.

📅 Data spans from February 8, 2024 to present

3
Total CVEs
2
Critical+High
0
Exploited
1
Unpatched

Threat Assessment

Avg CVSS
8.2
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
1
Critical/High
Risk Level
52/100
medium

Severity Distribution

Critical
2
High
0
Medium
1
Low
0

Exploit Likelihood

>50% chance
0
20-50%
0
5-20%
0
<5%
2

Age Distribution

Common Weaknesses (CWE)

1
Null Pointer Dereference
1

Most Affected Products

1. libjwt LibJWT4
2. debian/libjwt4
3. Debian Debian Linux1

Recent Vulnerabilities

See more →
CVE-2026-44699
CVSS 9.1critical

LibJWT: Algorithm confusion allows JWT forgery with RSA JWK as empty-key HMAC

May 15, 2026🔧 No Patch
CVE-2026-33996
CVSS 5.8EPSS 0%medium

LibJWT has NULL/bounds validation in JWK octet and RSA PSS parsing

Mar 27, 2026
CVE-2024-25189
CVSS 9.8EPSS 0%critical
Feb 8, 2024

Monitor libjwt in Real-Time

Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.

Start Free TrialBook a Demo
Powered bySecAlerts

Monitor Your Software Stack in Real-Time

Get instant alerts when vulnerabilities are discovered in your software stack. Stay ahead of security threats with SecAlerts.

Start Free TrialBook a Demo
AboutNewsDocumentationTermsContact

© 2026 SecAlerts Pty Ltd. All rights reserved.

libjwt Security Vulnerabilities & Risk Score | 3 CVEs | SecAlerts - SecAlerts