Skip to content
RequestGuard Vulnerabilities
Pricing
Vulnerability intelligence Composer

lexik/jwt-authentication-bundle

This bundle provides JWT authentication for your Symfony REST API

Composer latest 3.2.0 MIT

Evidence path

Version, exploitation, severity

RequestGuard keeps these facts separate. A KEV match refers to a CVE, while OSV supplies the package and version match.

1

Latest version

3.2.0

No matching published advisory returned

2

Known exploitation

No KEV match

Checked by exact CVE identifier

3

Highest advisory severity

Moderate

2 active advisories

Check an exact version

The registry confirms the version, then OSV checks advisories for that exact value.

Published records

Advisories

2
GHSA-5pv8-ppvj-4h68 moderate

Prevent user enumeration using Guard or the new Authenticator-based Security

Affected range

ECOSYSTEM: introduced 2.0.0; fixed 2.10.7ECOSYSTEM: introduced 2.11.0; fixed 2.11.3>=2.0.0,<2.1.0|>=2.1.0,<2.2.0|>=2.2.0,<2.3.0|>=2.3.0,<2.4.0|>=2.4.0,<2.5.0|>=2.5.0,<2.6.0|>=2.6.0,<2.7.0|>=2.7.0,<2.8.0|>=2.8.0,<2.9.0|>=2.9.0,<2.10.0|>=2.10.0,<2.10.7|>=2.11.0,<2.11.3

Fixed versions: 2.10.7, 2.11.3

CVE-2021-21424 Source ↗Source ↗
GHSA-2frx-j9hj-6c65 low

User enumeration in authentication mechanisms

Affected range

ECOSYSTEM: introduced 0; fixed 2.10.7ECOSYSTEM: introduced 2.11.0; fixed 2.11.3>=2.11.0,<2.11.3|<2.10.7

Fixed versions: 2.10.7, 2.11.3

Source ↗Source ↗