PT-2025-40251

Name of the Vulnerable Software and Affected Versions Kazaar version 1.25.12 Description The software allows a JSON Web Token JWT with 'none' specified in the 'alg' field. This can potentially compromise the integrity of the authentication process. Recommendations At the moment, there is no...

CVE-2025-59686

Kazaar 1.25.12 allows /api/v1/org-id/orders/order-id/documents calls with a modified order-id...

CVE-2025-59685

Kazaar version 1.25.12 , a print marketing fulfillment platform, is vulnerable to an authentication bypass. The software incorrectly allows the use of a JSON Web Token (JWT) where the alg field is set to none . This flaw compromises the integrity of the authentication process. No information rega...

CVE-2025-59685

Kazaar 1.25.12 allows a JWT with none in the alg field...