Detections
Analytics
SCA: security update for web-token/jwt-library (GHSA-3prj-6hqw-cm82)
high Tenable Self-Hosted Container Security Plugin ID 443549
Description
PHP JWT Library: PBES2-HS*+A*KW unwrap accepts an unbounded p2c iteration count, enabling CPU-amplification denial of serviceSolution
Update the web-token/jwt-library library and its related packages to version 3.4.10 or later.See Also
Plugin Details
Severity: High
ID: 443549
Version: Revision 1.1
Type: Local
Family: SCA Checks
Published: 6/19/2026
Updated: 6/19/2026
Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security
Vulnerability Information
Exploit Ease: No known exploits are available
Patch Publication Date: 6/18/2026
Vulnerability Publication Date: 6/18/2026