Repository navigation

Security

Report a vulnerability

SECURITY.md

Security Policy

Supported Versions

Versions currently supported with security updates.

Version	Supported
2.1.x	✅
2.0.x	✅
1.0.x	❌
0.1.x	❌

Reporting a Vulnerability

Report through GitHub security tab.

Weak Random for Timing Attack Mitigation
GHSA-c9q6-g3hr-8gww published Jan 13, 2026 by samrocketman

Moderate
JWT Algorithm Confusion Vulnerability
GHSA-5pq9-5mpr-jj85 published Jan 13, 2026 by samrocketman

Moderate
SHA-256 Hex String Padding Bug
GHSA-67rj-pjg6-pq59 published Jan 13, 2026 by samrocketman

High
Salt for PBKDF2 derived from password
GHSA-36h5-vrq6-pp34 published Jan 13, 2026 by samrocketman

High
Deterministic AES IV Derivation from Passphrase
GHSA-crxp-chh4-9ghp published Jan 13, 2026 by samrocketman

High
AES CBC Mode Without Authentication
GHSA-gxp5-mv27-vjcj published Jan 13, 2026 by samrocketman

Critical
RSA PKCS#1 v1.5 Padding Vulnerability
GHSA-mqw7-c5gg-xq97 published Jan 13, 2026 by samrocketman

Critical

Learn more about advisories related to samrocketman/jervis in the GitHub Advisory Database