Threats tagged 'brew-mcp-atlassian-cve-2026-48990'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.3	EPSS 0.2%	CVE-2026-48990joserfc · b64=false RFC7797 JWS payloads bypass JWSRegistry payload-size limits during deserialization Medium5.3EPSS 0.2%2026-08-13GCVE DatabaseCVE-2026-48990 The joserfc library version 1.6.5 and earlier allow oversized RFC7797 b64=false JWS payloads to bypass the configured maximum payload size limit during deserialization. This occurs because the payload size validation is not applied to unencoded payloads as specified by RFC7797, unlike the normal base64url-encoded payloads. This flaw can lead to moderate availability or resource exhaustion risks when processing untrusted JWS tokens. EPSS 0.2%Report on CVE-2026-48990 Vulnerability #brew-mcp-atlassian-cve-2026-48990 #homebrew	GCVE Database	2026-08-13

Page 1 of 1