Connect2id

Products

ProductCVEsExploitedLatest
Nimbus JOSE+JWT1–Jul 11, 2025

Exploited and recent CVEs

  • CVE-2025-53864 Medium 5.8 Connect2id Nimbus JOSE + JWT 10.0.x before 10.0.2 and 9.37.x before 9.37.4 allows a remote attacker to cause a denial of service via a deeply nested JSON object supplied in a JWT claim set, because of 1.0%