Threats tagged 'brew-dvc-cve-2024-53861'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Low	2.2	EPSS 0.8%	CVE-2024-53861Dvc · PyJWT Issuer field partial matches allowed Low2.2EPSS 0.8%2026-08-13GCVE DatabaseCVE-2024-53861 A vulnerability in PyJWT's issuer ('iss') claim validation allows partial string matches instead of exact matches due to a type-checking bug introduced in version 2.10.0. This causes tokens with incorrect issuer values that partially match the expected issuer string to be accepted. The signature validation remains intact, limiting the impact. EPSS 0.8%Vulnerability #brew-dvc-cve-2024-53861 #homebrew #brew-parsedmarc-cve-2024-53861	GCVE Database	2026-08-13

Page 1 of 1