jwt

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

jwt records in CISA KEV

No jwt vulnerabilities are listed in CISA KEV.

2 records

TI-2026-33154 CVE-2026-45363 · GHSA-c32j-vqhx-rx3x

MEDIUM 47

ruby-jwt is a Ruby implementation of the RFC 7519 OAuth JSON Web Token standard.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00364 Published 2026-07-14 Partial fix · 2.10.3, 3.2.0 CWE-1391

TI-2025-34621 CVE-2025-54887 · GHSA-c7p4-hx26-pr73

MEDIUM 47

jwe is a Ruby implementation of the RFC 7516 JSON Web Encryption (JWE) standard.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00268 Published 2025-08-08 Fixed in 1.1.1 CWE-354