Known vulnerabilities in jwcrypto

Vendor: latchset
Software: jwcrypto
Software CPE: cpe:2.3:a:latchset:jwcrypto:*:*:*:*:*:*:*:*
Website: https://github.com/latchset/
Total vulnerabilities: 4
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting jwcrypto jwcrypto is affected by 4 known vulnerabilities: 4 medium Critical High Medium Low

Vulnerabilities (4)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU125313 - Improper Handling of Highly Compressed Data (Data Amplification)
CVE-2026-39373		 CWE-409 Medium
No
No
 1.5.7 08.04.2026 SB2026040864
SB20260417149
SB20260417150
and 3 more
#VU87180 - Resource exhaustion
CVE-2024-28102		 CWE-400 Medium
No
No
 1.5.6 07.03.2024 SB2024030713
SB2024043074
SB2024050632
and 13 more
#VU84778 - Improper input validation
CVE-2023-6681		 CWE-20 Medium
No
No
 1.5.1 26.12.2023 SB2023122623
SB2024021609
SB20240312252
and 6 more
#VU125314 - Insufficient Verification of Data Authenticity
CVE-2022-3102		 CWE-345 Medium
No
No
 1.4.0 19.09.2022 SB2022091935