PT-2026-76630

openssl encrypt before 1.4.0 contains an authentication bypass vulnerability in the verify api token function that accepts any non-empty Bearer token string without validation. Attackers can upload arbitrary public keys, enumerate all keys, and revoke keys belonging to any user by providing any...