PT-2026-85251

A flaw was found in the jwcrypto library, which is used for implementing Javascript Object Signing and Encryption JOSE standards. The issue occurs when the library verifies a General JSON Serialization JWS using a set of keys. Due to a coding error, the library fails to correctly identify the...

The vulnerability of the JOSE library Authlib implementation for OAuth and OpenID Connect servers lies in the exposure of information due to inconsistencies, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the JOSE library Authlib implementation for OAuth and OpenID Connect servers is related to the disclosure of information due to incompatibility. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...

JWCrypto 安全漏洞

JWCrypto is an open-source implementation of a JavaScript Object Signature and Encryption JOSE web standard. Versions of JWCrypto prior to 1.5.7 contained security vulnerabilities, which stemmed from insufficient validation of the compressed output size. This could allow unauthenticated attackers...