MEDIUMPackagist
GHSA-6vvh-pxr4-25r7PHP JWT Framework: Chacha20Poly1305 key-encryption algorithm discards the Poly1305 authentication tag, performing no authentication on decryption
Modified: 9/10/2026
package
Packagist/web-token/jwt-experimental
pkg:packagist/web-token/jwt-experimental
HIGHPackagist
GHSA-jc38-x7x8-2xc8PHP JWT Framework: JWSVerifier uses algorithm from unprotected header, enabling algorithm confusion attacks
Modified: 9/10/2026