PHP JWT Library: RSA1_5 (RSAES-PKCS1-v1_5) decryption lacks implicit rejection, exposing a Bleichenbacher/Marvin padding oracle
Moderate severity
GitHub Reviewed
Published
Jun 6, 2026
in
web-token/jwt-framework
•
Updated Aug 31, 2026
Give feedback on Dependabot alerts