Debian Libjwt3 vulnerabilities

1 known vulnerability affecting debian/libjwt3.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

LOW1

Vulnerabilities

Page 1 of 1

CVE-2026-33996LOWCVSS 5.8fixed in libjwt3 3.3.2-1 (forky)2026

CVE-2026-33996 [MEDIUM] CVE-2026-33996: libjwt - LibJWT is a C JSON Web Token Library. Starting in version 3.0.0 and prior to ver... LibJWT is a C JSON Web Token Library. Starting in version 3.0.0 and prior to version 3.3.0, the JWK parsing for RSA-PSS did not protect against a NULL value when expecting to parse JSON string values. A specially crafted JWK file could exploit this behavior by using integers in places where the code expected a string. This was fixed in v3.3.0. A workaround is avail