BELL-CVE-2024-53861 CVE-2024-53861 does not affect BellSoft software

Bulletin has no description...

CVE-2024-53861 vulnerabilities

Vulnerabilities for packages: barman, py3-pyjwt, az...

CVE-2024-53861 vulnerabilities

Vulnerabilities for packages: py3-pyjwt, az...

CVE-2024-53861

pyjwt is a JSON Web Token implementation in Python. An incorrect string comparison is run for iss checking, resulting in "acb" being accepted for "abc". This is a bug introduced in version 2.10.0: checking the "iss" claim changed from isinstanceissuer, list to isinstanceissuer, Sequence. Since st...

CVE-2024-53861 Issuer field partial matches allowed in pyjwt

pyjwt is a JSON Web Token implementation in Python. An incorrect string comparison is run for iss checking, resulting in "acb" being accepted for "abc". This is a bug introduced in version 2.10.0: checking the "iss" claim changed from isinstanceissuer, list to isinstanceissuer, Sequence. Since st...