Threats tagged 'brew-rapid-mlx-cve-2026-102268'

1 threat

Threats tagged 'brew-rapid-mlx-cve-2026-102268'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.1	EPSS 0.2%	CVE-2026-102268pyjwt · Improper Verification of Cryptographic Signature Critical9.1EPSS 0.2%2026-09-28CVE Database V5CVE-2026-102268 PyJWT versions prior to 2.14.0 contain a vulnerability in the is_pem_format function that improperly verifies cryptographic signatures. This flaw allows an attacker who knows a public key to forge authenticated HMAC tokens by exploiting how the library misinterprets certain malformed PEM public keys as HMAC secrets. The issue is resolved in version 2.14.0. EPSS 0.2%Vulnerability jpadilla #cwe-347 #brew-rapid-mlx-cve-2026-102268 #homebrew	CVE Database V5	2026-09-28

Showing 1–1 of 1 result