openSUSE-SU-2026:21515-1
openSUSE-SU-2026:21515-1 · Security update for python-joserfc
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This update for python-joserfc fixes the following issues: Changes in python-joserfc: - CVE-2026-62995: acceptance of JWTs with trailing padding can lead to JWT malleability and allows for bypass of token revocation and anti-replay protection (bsc#1272991)
Fix available
- Published
- Updated
Stack: system
Affected products and versions
python-joserfc openSUSE:Leap 16.0
- Affected ranges
- ECOSYSTEM: < 1.1.0-bp160.4.1
Update to 1.1.0-bp160.4.1