python-jose 安全漏洞

python-jose is a JOSE implementation in Python by the individual developer Michael Davis. A security vulnerability exists in python-jose version 3.3.0 and earlier, which stems from unenforced alg=none token denial, and could lead to bypassing authentication checks, which in turn could lead to...