logo

Database

Insecure encryption algorithm In firebase/php-jwt

Description

php-jwt contains weak encryption php-jwt v6.11.0 was discovered to contain weak encryption.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
Affected version
Patched versions

Aliases

1. CVE-2025-457692. NVD-2025-457693. OSV-2025-457694. GHSA-2x45-7fc3-mxwq5. GCVE-2025-45769

References

1. https://github.com/firebase/php-jwt/issues/6112. https://github.com/firebase/php-jwt/issues/6183. https://github.com/firebase/php-jwt/issues/6204. https://github.com/firebase/php-jwt/pull/6135. https://github.com/github/advisory-database/pull/69546. https://github.com/firebase/php-jwt/commit/6b80341bf57838ea2d011487917337901cd715767. https://gist.github.com/ZupeiNie/83756316c4c24fe97a50176a92608db38. https://github.com/firebase9. https://github.com/firebase/php-jwt/releases/tag/v7.0.0

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.