Advisories · Technology

benmcollins libjwt.

Every CVE that names benmcollins libjwt among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-44699 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

LibJWT: Algorithm confusion allows JWT forgery with RSA JWK as empty-key HMAC
- benmcollins libjwt
- Weak cryptography or TLS
Not analysed yet 15 May 2026
CVE-2026-33996 CVE record

CVSS 5.8 Medium

LibJWT has NULL/bounds validation in JWK octet and RSA PSS parsing
- benmcollins libjwt
- Memory corruption
Not analysed yet 27 Mar 2026