Threats tagged 'brew-mcpm-cve-2026-27962'

Authlib's JWS implementation contains a JWK header injection vulnerability (CVE-2026-27962) that allows an unauthenticated attacker to forge JWT tokens that pass signature verification. This occurs when key=None is passed to JWS deserialization functions, causing the library to trust the attacker-controlled 'jwk' header as the verification key. This violates RFC 7515 and enables authentication and authorization bypass. The vulnerability affects authlib versions >=2.1.0 and <2.13.0_3. A fix is available in version 2.13.0_3.