{"action":"Upgrade firebase/php-jwt to 2.0.0 or later.","affected":[{"fixed":"2.0.0","introduced":"0"}],"component":"firebase/php-jwt","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["2.0.0"],"ghsa_id":"GHSA-h533-5v22-8vcp","id":"tcs_01M5KF3B5XCRW15GMC284Z4GTB","modified_at":"2024-11-29T05:32:23.815899Z","published_at":"2024-05-15T21:38:49Z","references":["https://osv.dev/vulnerability/GHSA-h533-5v22-8vcp","https://github.com/firebase/php-jwt/commit/b2c2be6a45fda769c8c2ffe5ec4259a9d1e46e5b","https://auth0.com/blog/2015/03/31/critical-vulnerabilities-in-json-web-token-libraries","https://auth0.com/blog/critical-vulnerabilities-in-json-web-token-libraries","https://github.com/FriendsOfPHP/security-advisories/blob/master/firebase/php-jwt/2015-04-02.yaml","https://github.com/firebase/php-jwt"],"severity":{"label":"critical"},"sources":[{"source":"osv","source_id":"GHSA-h533-5v22-8vcp","url":"https://osv.dev/vulnerability/GHSA-h533-5v22-8vcp"}],"summary":"firebase/php-jwt: \"None\" Algorithm treated as valid on tokens"}