CyberSecBulletin

Kelvinmo vulnerabilities

We track 1 vulnerability in Kelvinmo products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on March 20, 2026.

1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score

Latest Kelvinmo vulnerabilities

  • 7.5 High severity

    simplejwt: Uncontrolled Resource Consumption

    CVE-2026-33204Kelvinmo

    SimpleJWT is a simple JSON web token library written in PHP. Prior to version 1.1.1, an unauthenticated attacker can perform a Denial of Service via JWE header tampering when PBES2 algorithms are used. Applications that call JWE::decrypt() on attacker-controll