ROS-20260929-73-0181

The vulnerability of the f2fs component of the Linux operating system’s kernel is related to the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260929-73-0180

The vulnerability of the advanceperiodictargetexpiration function in the arch/x86/kvm/lapic.c module of the virtualization subsystem on the x86 kernel of the Linux operating system is related to the improper shutdown or release of resources. Exploiting this vulnerability could allow an attacker t...

ROS-20260929-73-0178

The vulnerability of the ip6greheader function in the net/ipv6/ip6gre.c module of the Linux operating system’s IPv6 kernel implementation is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260929-73-0101

The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260929-73-0105

The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260929-73-0174

The vulnerability of the usb/asixcommon.c component in the Linux operating system is related to incorrect checking of the specified index, position, or offset in input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260929-73-0175

The vulnerability of the stmmac/stmmacmain.c component in the Linux operating system is related to pointer dereferencing errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260929-73-0176

The vulnerability of the ibnlhandleipresresp function in the drivers/infiniband/core/addr.c module of the Linux operating system’s kernel driver relates to access to an uninitialized pointer. Exploiting this vulnerability could allow a attacker to cause a service failure...

SUSE CVE-2026-97486

In the Linux kernel, the following vulnerability has been resolved: hpfs: handle setblocksize failures hpfs uses bufferheads, which don't handle block size PAGESIZE well. Without this, mounting will hit the BUGONoffset = foliosizefolio; in foliosetbh on the first breadgfp call...

CVE-2026-102274

A flaw was found in pyjwt. The library fails to properly handle errors when parsing a JSON Web Key JWK set that contains a malformed RSA key alongside valid keys. A remote attacker can supply or inject a malformed key to abort the processing of the entire key set, resulting in authentication...

CVE-2026-102274

PyJWT is a Python implementation of JSON Web Token standards. From 2.9.0 until 2.14.0, PyJWKSet does not catch the plain ValueError raised for malformed RSA JWK components by RSAAlgorithm.fromjwk in jwt/apijwk.py. This occurs when a JWK Set contains a malformed RSA key alongside otherwise usable...

AZL-104985 CVE-2026-102269 affecting package python-jwt 2.13.0-1

PyJWT is a Python implementation of JSON Web Token standards. Prior to 2.14.0, PyJWT signature segment is affected because signature segment decoding accepts characters outside the canonical Base64URL representation. This occurs when non-Base64URL characters are appended to a valid compact JWS...

CVE-2026-102269

PyJWT is a Python implementation of JSON Web Token standards. Prior to 2.14.0, PyJWT signature segment is affected because signature segment decoding accepts characters outside the canonical Base64URL representation. This occurs when non-Base64URL characters are appended to a valid compact JWS...

CVE-2026-102265

PyJWT is a Python implementation of JSON Web Token standards. From 2.13.0 until 2.14.0, PyJWS.load in jwt/apijws.py is affected because parser catches ValueError but not RecursionError. This occurs when a deeply nested token header reaches json.loads. As a result, RecursionError escapes the...

EUVD-2026-88549

PyJWT is a Python implementation of JSON Web Token standards. From 2.13.0 until 2.14.0, PyJWS.load in jwt/apijws.py is affected because parser catches ValueError but not RecursionError. This occurs when a deeply nested token header reaches json.loads. As a result, RecursionError escapes the...

CVE-2026-102265 PyJWT: Uncaught RecursionError in jwt.decode() on deeply nested token header

PyJWT is a Python implementation of JSON Web Token standards. From 2.13.0 until 2.14.0, PyJWS.load in jwt/apijws.py is affected because parser catches ValueError but not RecursionError. This occurs when a deeply nested token header reaches json.loads. As a result, RecursionError escapes the...

CVE-2026-102265

PyJWT is a Python implementation of JSON Web Token standards. From 2.13.0 until 2.14.0, PyJWS.load in jwt/apijws.py is affected because parser catches ValueError but not RecursionError. This occurs when a deeply nested token header reaches json.loads. As a result, RecursionError escapes the...

CVE-2026-102274 PyJWT: Malformed RSA JWK aborts parsing of an entire JWK Set

PyJWT is a Python implementation of JSON Web Token standards. From 2.9.0 until 2.14.0, PyJWKSet does not catch the plain ValueError raised for malformed RSA JWK components by RSAAlgorithm.fromjwk in jwt/apijwk.py. This occurs when a JWK Set contains a malformed RSA key alongside otherwise usable...

CVE-2026-102274

The Python library PyJWT (versions 2.9.0 through 2.14.0) is vulnerable to a flaw in PyJWKSet where it fails to handle a ValueError raised by RSAAlgorithm.from_jwk in jwt/api_jwk.py. If a JWK Set contains a single malformed RSA key alongside valid keys, the entire construction of the PyJWKSet is a...

CVE-2026-102274 PyJWT: Malformed RSA JWK aborts parsing of an entire JWK Set

PyJWT is a Python implementation of JSON Web Token standards. From 2.9.0 until 2.14.0, PyJWKSet does not catch the plain ValueError raised for malformed RSA JWK components by RSAAlgorithm.fromjwk in jwt/apijwk.py. This occurs when a JWK Set contains a malformed RSA key alongside otherwise usable...