benmcollins
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| libjwt | 2 | – | May 15, 2026 |
Exploited and recent CVEs
- CVE-2026-44699 LibJWT: Algorithm confusion allows JWT forgery with RSA JWK as empty-key HMAC 0.3%
- CVE-2026-33996 LibJWT has NULL/bounds validation in JWK octet and RSA PSS parsing 0.2%