l
libjwt
Security Risk Profile
52
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 3 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from February 8, 2024 to present
3
Total CVEs
2
Critical+High
0
Exploited
2
Unpatched
Threat Assessment
Avg CVSS
8.2
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
2
Critical/High
Risk Level
52/100
medium
Severity Distribution
Critical
2High
0Medium
1Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
2Age Distribution
Common Weaknesses (CWE)
1
Null Pointer Dereference
1
Most Affected Products
1. libjwt LibJWT4
2. Debian Debian Linux1
Recent Vulnerabilities
See more →CVE-2026-44699
CVSS 9.1critical
LibJWT: Algorithm confusion allows JWT forgery with RSA JWK as empty-key HMAC
May 15, 2026🔧 No Patch
CVE-2026-33996
CVSS 5.8EPSS 0%medium
LibJWT has NULL/bounds validation in JWK octet and RSA PSS parsing
Mar 27, 2026
CVE-2024-25189
CVSS 9.8EPSS 0%critical
Feb 8, 2024🔧 No Patch
Monitor libjwt in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.