async-media-agents (>=0.1.0, <=0.1.2), cmdbsyncer (>=3.12.7, <=4.3.5) +9 more potentially affected by CVE-2026-48990 via joserfc (>=1.4.1, <=1.6.5)

joserfc PYPI version =1.4.1, =0.1.0, =3.12.7, =1.0.5, =2.6.0, =26.1.0, =3.0.6, =4.5.0, =1.2.79, =0.9.0, =0.4.4, =0.4.5 Source cves: CVE-2026-48990 Source advisory: OSV:PYSEC-2026-2530...

CVE-2026-48990 vulnerabilities

Vulnerabilities for packages: localstack, airflow...

CVE-2026-48990

creationtimestamp| type| source ---|---|--- 2026-06-26 22:35:29+00:00| published-proof-of-concept| https://github.com/authlib/joserfc/security/advisories/GHSA-wphv-vfrh-23q5...

async-media-agents (>=0.1.0, <=0.1.2), cmdbsyncer (>=3.12.7, <=4.3.5) +9 more potentially affected by CVE-2026-48990 via joserfc (>=1.4.1, <=1.6.5)

joserfc PYPI version =1.4.1, =0.1.0, =3.12.7, =1.0.5, =2.6.0, =26.1.0, =3.0.6, =4.5.0, =1.2.79, =0.9.0, =0.4.4, =0.4.5 Source cves: CVE-2026-48990 Source advisory: MEND:CVE-2026-48990...