What’s Vulnerable › Products
Simple JWT Login vulnerabilities
3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.
Check whether your Simple JWT Login version is affected
Latest Simple JWT Login vulnerabilities
- CVE-2026-19714 — Simple JWT Login < 3.6.8 - Unauthenticated Account Takeover via Missing Google id_token Audience Validation (CVSS 9.1)
- CVE-2021-24998 — Simple JWT Login < 3.3.0 - Insecure Password Creation (CVSS 7.5)
- CVE-2021-24804 — Simple JWT Login < 3.2.1 - Arbitrary Settings Update to Site Takeover via CSRF (CVSS 8.8)