Threats tagged 'brew-hermes-agent-cve-2026-102268'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Critical	9.1	CVE-2026-102268hermes-agent · PyJWT: Asymmetric-PEM detection bypass: whitespace/line-ending-mutated public keys skip the HS/asymmetric confusion Critical9.12026-09-30GCVE DatabaseCVE-2026-102268 PyJWT versions before 0.22.4 contain a vulnerability where malformed PEM public keys with whitespace or unusual line endings bypass the asymmetric key detection. This causes the public key to be used as an HMAC secret, allowing an attacker who knows the public key to forge valid HS256 tokens when the verification algorithm list mixes HMAC and asymmetric algorithms. Report on CVE-2026-102268 Vulnerability #brew-hermes-agent-cve-2026-102268 #homebrew	GCVE Database	2026-09-30

Page 1 of 1