← Database

CVE-2025-3757

CRITICAL CVSS: 9.8 Published: 2025-05-13 Modified: 2026-06-17

Description

Versions of OpenPubkey library prior to 0.10.0 contained a vulnerability that would allow a specially crafted JWS to bypass signature verification.

Affected Platforms

Openpubkey Openpubkey

Weakness Type

CWE-305, CWE-347

References