PatchFirst · Vulnerabilidades recientes
Vulnerabilidad publicada para python-joserfc en los últimos 30 días: 1. En el catálogo KEV: 0.
Vulnerabilidades: 4
This update for python-joserfc fixes the following issues: Changes in python-joserfc: - CVE-2026-102946: JWS signature verification can be bypassed via empty signatures array (bsc#1285840)
This update for python-joserfc fixes the following issues: Changes in python-joserfc: - CVE-2026-62995: acceptance of JWTs with trailing padding can lead to JWT malleability and allows for bypass of token revocation and anti-replay protection (bsc#1272991)
This update for python-joserfc fixes the following issues: Changes in python-joserfc: - CVE-2026-49852: HS256/HS384/HS512 verify accepts empty/nil HMAC key (bsc#1270234)
This update for python-joserfc fixes the following issues: Changes in python-joserfc: - CVE-2026-27932: unbounded PBKDF2 iteration count can lead to a denial of service (bsc#1259154)
Compara tu pila y las versiones instaladas con las bases actuales de vulnerabilidades.