Known vulnerabilities in jwcrypto

Vendor: latchset
Software: jwcrypto
Software CPE: cpe:2.3:a:latchset:jwcrypto:*:*:*:*:*:*:*:*
Website: https://github.com/latchset/
Total vulnerabilities: 7
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting jwcrypto jwcrypto is affected by 7 known vulnerabilities: 6 medium, 1 low Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU150672 - Inefficient Algorithmic Complexity
CVE-2026-92091		 CWE-407 Medium
No
No
 1.6.1 17.09.2026 SB20260917228
SB20260925204
SB2026100911
#VU146777 - Improper Verification of Cryptographic Signature
CVE-2026-84185		 CWE-347 Low
No
No
 1.6.0 02.09.2026 SB2026090287
SB2026092168
#VU145891 - Allocation of Resources Without Limits or Throttling
CVE-2026-80179		 CWE-770 Medium
No
No
 1.5.9 27.08.2026 SB2026082728
#VU125313 - Improper Handling of Highly Compressed Data (Data Amplification)
CVE-2026-39373		 CWE-409 Medium
No
No
 1.5.7 08.04.2026 SB2026040864
SB20260417149
SB20260417150
and 4 more
#VU87180 - Resource exhaustion
CVE-2024-28102		 CWE-400 Medium
No
No
 1.5.6 07.03.2024 SB2024030713
SB2024043074
SB2024050632
and 14 more
#VU84778 - Improper input validation
CVE-2023-6681		 CWE-20 Medium
No
No
 1.5.1 26.12.2023 SB2023122623
SB2024021609
SB20240312252
and 6 more
#VU125314 - Insufficient Verification of Data Authenticity
CVE-2022-3102		 CWE-345 Medium
No
No
 1.4.0 19.09.2022 SB2022091935