PatchFirst · Vulnérabilités récentes
Vulnérabilité publiée pour python-joserfc au cours des 30 derniers jours : 1. Dans le catalogue KEV : 0.
Vulnérabilités : 4
This update for python-joserfc fixes the following issues: Changes in python-joserfc: - CVE-2026-102946: JWS signature verification can be bypassed via empty signatures array (bsc#1285840)
This update for python-joserfc fixes the following issues: Changes in python-joserfc: - CVE-2026-62995: acceptance of JWTs with trailing padding can lead to JWT malleability and allows for bypass of token revocation and anti-replay protection (bsc#1272991)
This update for python-joserfc fixes the following issues: Changes in python-joserfc: - CVE-2026-49852: HS256/HS384/HS512 verify accepts empty/nil HMAC key (bsc#1270234)
This update for python-joserfc fixes the following issues: Changes in python-joserfc: - CVE-2026-27932: unbounded PBKDF2 iteration count can lead to a denial of service (bsc#1259154)
Comparez votre pile et les versions installées aux bases de vulnérabilités actuelles.