opentok/opentok-v4.14.2: 1 vulnerabilities (highest severity is: 7.3)

[mend-for-github-com[bot]]

Vulnerable Library - opentok/opentok-v4.14.2

Vulnerabilities

Vulnerability	Severity	CVSS	Exploit Maturity	EPSS	Dependency	Type	Fixed in (opentok/opentok-v4.14.2 version)	Remediation Possible**	Reachability
CVE-2025-45769	High	7.3	Not Defined		firebase/php-jwt-v6.10.0	Transitive	N/A*	❌

*For some transitive vulnerabilities, there is no version of direct dependency with a fix. Check the "Details" section below to see if there is a version of transitive dependency where vulnerability is fixed.

**In some cases, Remediation PR cannot be created automatically for a vulnerability despite the availability of remediation

Details

CVE-2025-45769

Vulnerable Library - firebase/php-jwt-v6.10.0

A simple library to encode and decode JSON Web Tokens (JWT) in PHP. Should conform to the current spec.

Library home page: https://api.github.com/repos/firebase/php-jwt/zipball/a49db6f0a5033aef5143295342f1c95521b075ff

Dependency Hierarchy:

• opentok/opentok-v4.14.2 (Root Library)
  • :x: firebase/php-jwt-v6.10.0 (Vulnerable Library)

Found in base branch: main

Vulnerability Details

php-jwt v6.11.0 was discovered to contain weak encryption.

Publish Date: 2025-07-31

URL: CVE-2025-45769

Threat Assessment

Exploit Maturity: Not Defined

EPSS:

CVSS 3 Score Details (7.3)

Base Score Metrics:

• Exploitability Metrics:
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Scope: Unchanged
• Impact Metrics:
  • Confidentiality Impact: Low
  • Integrity Impact: Low
  • Availability Impact: Low

For more information on CVSS3 Scores, click here.