CVE-2026-28802

CVE-2026-28802 affects the Python package Authlib, which builds OAuth/OpenID Connect servers. The issue occurs in versions 1.6.5 through before 1.6.7, where tests involving a malicious JWT with alg: none and an empty signature could pass the signature verification step without code changes when a...

Kazaar 安全漏洞

Kazaar is a print marketing fulfillment platform from Kazaar, Inc. A security vulnerability exists in Kazaar version 1.25.12 that stems from allowing the use of a JWT with an alg field of none, which could lead to authentication bypass...