Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/lexik/jwt-authentication-bundle@2.6.0
purl pkg:composer/lexik/jwt-authentication-bundle@2.6.0
Next non-vulnerable version 2.10.7
Latest non-vulnerable version 2.11.3
Risk score 2.4
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
GHSA-2frx-j9hj-6c65
Aliases:
GMS-2021-53
User enumeration in authentication mechanisms Description ----------- The ability to enumerate users was possible without relevant permissions due to different …
2.10.7
Not vulnerable
GHSA-5pv8-ppvj-4h68
Aliases:
CVE-2021-21424
Prevent user enumeration using Guard or the new Authenticator-based Security Description ----------- The ability to enumerate users was possible without …
2.10.7
Not vulnerable
This package is not known to fix any advisories.