From 2b7748d7f3045c8e0e7ae3e3d7c7de2a8db1616b Mon Sep 17 00:00:00 2001 From: Magno Gaspar Date: Wed, 8 Jul 2026 16:14:34 -0300 Subject: [PATCH] Improve GHSA-3prj-6hqw-cm82 --- .../GHSA-3prj-6hqw-cm82.json | 42 ++++++++++++++++++- 1 file changed, 40 insertions(+), 2 deletions(-) diff --git a/advisories/github-reviewed/2026/06/GHSA-3prj-6hqw-cm82/GHSA-3prj-6hqw-cm82.json b/advisories/github-reviewed/2026/06/GHSA-3prj-6hqw-cm82/GHSA-3prj-6hqw-cm82.json index 81893c3ee3a6d..883804d62f05b 100644 --- a/advisories/github-reviewed/2026/06/GHSA-3prj-6hqw-cm82/GHSA-3prj-6hqw-cm82.json +++ b/advisories/github-reviewed/2026/06/GHSA-3prj-6hqw-cm82/GHSA-3prj-6hqw-cm82.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-3prj-6hqw-cm82", - "modified": "2026-06-18T21:09:01Z", + "modified": "2026-06-18T21:09:05Z", "published": "2026-06-18T21:09:01Z", "aliases": [], "summary": "PHP JWT Library: PBES2-HS*+A*KW unwrap accepts an unbounded p2c iteration count, enabling CPU-amplification denial of service", @@ -45,7 +45,7 @@ "introduced": "0" }, { - "last_affected": "4.1.6" + "fixed": "3.4.10" } ] } @@ -88,6 +88,44 @@ ] } ] + }, + { + "package": { + "ecosystem": "Packagist", + "name": "web-token/jwt-framework" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "4.0.0" + }, + { + "fixed": "4.0.7" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Packagist", + "name": "web-token/jwt-framework" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "4.1.0" + }, + { + "fixed": "4.1.7" + } + ] + } + ] } ], "references": [