Download Latest Version 4.1.7 source code.zip (376.7 kB)
Email in envelope

Get an email when there's a new version of PHP JWT Framework

Home / 4.1.7
Name Modified Size InfoDownloads / Week
Parent folder
4.1.7 source code.tar.gz 2026-06-06 130.9 kB
0
4.1.7 source code.zip 2026-06-06 376.7 kB
0
README.md 2026-06-06 590 Bytes
0
Totals: 3 Items   508.2 kB 0

Release Notes for 4.1.7

Security patch release (4.1.x).

Brings the security fixes up from 4.0.x (#655):

  • PBES2-HS*+A*KW — bounded p2c (PBKDF2 iteration count) to prevent a CPU-amplification denial of service. (GHSA-3prj-6hqw-cm82)
  • ChaCha20-Poly1305 key encryption — Poly1305 authentication tag now emitted and verified. (GHSA-6vvh-pxr4-25r7)
  • RSA1_5 — constant-time implicit rejection (Bleichenbacher mitigation). (GHSA-5739-39v2-5754)
  • JWS — alg read only from the integrity-protected header (algorithm-confusion mitigation). (GHSA-jc38-x7x8-2xc8)
Source: README.md, updated 2026-06-06