Threats tagged 'brew-mcpm-cve-2026-32597'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.5	EPSS 0.3%	CVE-2026-32597SUSE pyjwt · Security update for python-PyJWT High7.5EPSS 0.3%2026-03-25GCVE DatabaseCVE-2026-32597 PyJWT versions prior to certain fixed releases do not validate the 'crit' (Critical) header parameter in JSON Web Signature (JWS) tokens as required by RFC 7515 §4.1.11. This allows tokens containing unknown critical extensions to be accepted instead of rejected, violating the RFC and potentially enabling security policy bypasses. The vulnerability is similar to CVE-2025-59420 affecting Authlib and has a CVSS score of 7.5 (High). EPSS 0.3%Report on CVE-2026-32597 Vulnerability SUSE Product Security Team #brew-azure-cli-cve-2026-32597 #homebrew #brew-ggshield-cve-2026-32597	GCVE Database	2026-03-25

Page 1 of 1