Threats tagged 'ghsa-qj95-qjqr-92xf'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.9	CVE-2026-19194The HashiCorp cap JWT validation library before version 0.14.0 is vulnerable to a claims validation bypass that may Medium5.92026-11-14GCVE DatabaseCVE-2026-19194 The HashiCorp cap JWT validation library versions before 0.14.0 contain a vulnerability that allows bypassing claims validation. This flaw may cause downstream applications to make authorization decisions based on unvalidated claim values. The vulnerability requires attacker-controlled claims in a JWT signed by a trusted key. It is fixed in version 0.14.0. Report on CVE-2026-19194 Vulnerability CWE-178 #ghsa-qj95-qjqr-92xf	GCVE Database	2026-11-14

Page 1 of 1