Vulnerabilities > Google > Firebase PHP JWT

DATE CVE VULNERABILITY TITLE RISK
2022-03-29 CVE-2021-46743 Type Confusion vulnerability in Google Firebase PHP-Jwt
In Firebase PHP-JWT before 6.0.0, an algorithm-confusion issue (e.g., RS256 / HS256) exists via the kid (aka Key ID) header, when multiple types of keys are loaded in a key ring.
network
low complexity
google CWE-843
critical
9.1