A vulnerability, which was classified as problematic, was found in benmcollins libjwt up to 3.2.x. Impacted is an unknown function of the component JWK Parser. Such manipulation leads to null pointer dereference.

This vulnerability is uniquely identified as CVE-2026-33996. The attack can only be initiated within the local network. No exploit exists.

You should upgrade the affected component.