Threats tagged 'ghsa-7jv8-hwmh-86qc'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Critical	9.1	CVE-2026-120459python-jose through 3.5.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to Critical9.12026-11-02GCVE DatabaseCVE-2026-120459 python-jose versions through 3.5.0 have an authentication bypass vulnerability due to acceptance of zero-length HMAC secrets. This flaw allows unauthenticated attackers to forge JSON Web Tokens (JWTs) with arbitrary claims when the verification key is empty, compromising token integrity and authentication. Report on CVE-2026-120459 Vulnerability CWE-347 #ghsa-7jv8-hwmh-86qc	GCVE Database	2026-11-02

Page 1 of 1