{"id":"GHSA-2x45-7fc3-mxwq","aliases":["CVE-2025-45769"],"title":"php-jwt contains weak encryption","titleSource":"OSV","descriptionSource":"OSV","declaredSeverity":"LOW","description":"php-jwt v6.11.0 was discovered to contain weak encryption.","severity":"medium","score":6.5,"published":"2025-07-31T21:31:53.000Z","modified":"2026-09-10T03:50:25.716Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Packagist","name":"firebase/php-jwt","sources":[{"name":"OSV · GHSA-2x45-7fc3-mxwq","url":"https://osv.dev/vulnerability/GHSA-2x45-7fc3-mxwq"}],"ranges":[{"events":[{"introduced":"0"},{"fixed":"7.0.0"}],"type":"ECOSYSTEM"}],"versions":["1.0.0","2.0.0","v2.1.0","v2.2.0","v3.0.0","v4.0.0","v5.0.0","v5.1.0","v5.2.0","v5.2.1","v5.3.0","v5.4.0","v5.5.0","v5.5.1","v6.0.0","v6.1.0","v6.1.1","v6.1.2","v6.10.0","v6.10.1","v6.10.2","v6.11.0","v6.11.1","v6.2.0","v6.3.0","v6.3.1","v6.3.2","v6.4.0","v6.5.0","v6.6.0","v6.7.0","v6.8.0","v6.8.1","v6.9.0"],"fixed":["7.0.0"]}],"sourceAffected":[],"references":["https://nvd.nist.gov/vuln/detail/CVE-2025-45769","https://github.com/firebase/php-jwt/issues/611","https://github.com/firebase/php-jwt/issues/618","https://github.com/firebase/php-jwt/issues/620","https://github.com/firebase/php-jwt/pull/613","https://github.com/github/advisory-database/pull/6954","https://github.com/firebase/php-jwt/commit/6b80341bf57838ea2d011487917337901cd71576","https://gist.github.com/ZupeiNie/83756316c4c24fe97a50176a92608db3","https://github.com/advisories/GHSA-2x45-7fc3-mxwq","https://github.com/firebase","https://github.com/firebase/php-jwt","https://github.com/firebase/php-jwt/releases/tag/v7.0.0"],"sources":[{"name":"OSV","id":"GHSA-2x45-7fc3-mxwq","modified":"2026-09-10T03:50:25.716459904Z","url":"https://osv.dev/vulnerability/GHSA-2x45-7fc3-mxwq"}],"assessments":[{"source":"OSV","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","score":6.5},{"source":"OSV","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U","score":2.7}],"products":[],"remediation":[],"kev":{"status":"not-listed","checkedAt":"2026-10-28T12:35:32.459Z"},"coverage":[{"source":"NVD","status":"not-checked"},{"source":"GHSA","status":"not-checked"},{"source":"EUVD","status":"not-checked"},{"source":"EPSS","status":"not-checked"}],"evidence":[]}