QwikSec

Security Database

CVE

CWE

Training

CVE-2025-45769

Published: Jul 31, 2025

Modified: Feb 18, 2026

PUBLISHED

Description

php-jwt v6.11.0 was discovered to contain weak encryption. NOTE: this issue has been disputed on the basis that key lengths are expected to be set by an application, not by this library. This dispute is subject to review under CNA rules 4.1.4, 4.1.14, and other rules; the dispute tagging is not meant to recommend an outcome for this CVE Record.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://github.com/firebase/php-jwt

https://github.com/firebase

https://gist.github.com/ZupeiNie/83756316c4c24fe97a50176a92608db3

https://github.com/firebase/php-jwt/issues/620

https://github.com/github/advisory-database/pull/6954

https://github.com/advisories/GHSA-2x45-7fc3-mxwq

https://github.com/firebase/php-jwt/releases/tag/v7.0.0

https://github.com/firebase/php-jwt/pull/613

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.