jwtear

Jwtear Uma ferramenta modular de linha de comando para analisar, criar e manipular tokens JSON Web Token JWT para fins de teste de segurança. Funcionalidades Modularidade completa. Todos os comandos são plugins. Fácil adicionar novos plugins. Suporte a tokens JWS e JWE. Interface fácil para...

POC-CVE-2018-0114

CVE-2018-0114 POC Cisco के node-jose ओपन सोर्स लाइब्रेरी के 0.11.0 से पहले के संस्करण में एक कमज़ोरी थी जो एक अप्रमाणित, दूरस्थ हमलावर को टोकन में एम्बेडेड कुंजी का उपयोग करके टोकन पर फिर से हस्ताक्षर करने की अनुमति दे सकती थी। यह कमज़ोरी node-jose द्वारा JSON वेब टोकन JWT के लिए JSON वेब सिग्नेच...

CVE-2018-0114-Exploit

CVE-2018-0114-Exploit Uma vulnerabilidade na biblioteca de código aberto Cisco node-jose antes da versão 0.11.0 poderia permitir que um atacante remoto não autenticado reassinasse tokens usando uma chave incorporada no token. A vulnerabilidade deve-se ao node-jose seguir o padrão JSON Web Signatu...

POC-CVE-2018-0114

POC-CVE-2018-0114 Este repositório contém o POC de um exploit para node-jose Stating from the last merge python lib: base64,urllib,rsa,sys Executando os testes Para executar o script, basta executar o seguinte comando: python jwk-node-jose.py "payload" key-size key-size sem Autores Andrea Cappa -...

cve-2022-39227-jwt-auth-bypass-demo

Demonstração de Bypass de Autenticação JWT CVE-2022-39227 Objetivo do Projeto Este projeto demonstra a vulnerabilidade CVE-2022-39227 em um ambiente de laboratório local controlado. Esta vulnerabilidade afeta a biblioteca python-jwt versões 3.3.4 e permite que um invasor falsifique claims JWT sem...

CVE-2025-65945-poc

CVE-2025-65945: Bypass de Assinatura do node-jws Esta é uma prova de conceito para um bypass de verificação de assinatura na biblioteca node-jws. O bug permite que atacantes forjem JWTs válidos quando o servidor deriva segredos HMAC de dados controlados pelo usuário. Qual é o bug? A função...

PyJWT: Non-canonical signature segments enable raw-token revocation bypass

SummaryPyJWT 2.13.0 accepts compact JWS signature segments containing characters thatare not in the Base64URL alphabet. Appending !!!! to a valid signature doesnot change the decoded signature bytes or authenticated claims, but it changesthe serialized token and its SHA-256 hash. An application...

PYSEC-2026-4147 PyJWT: Non-canonical signature segments enable raw-token revocation bypass

Summary PyJWT 2.13.0 accepts compact JWS signature segments containing characters that are not in the Base64URL alphabet. Appending !!!! to a valid signature does not change the decoded signature bytes or authenticated claims, but it changes the serialized token and its SHA-256 hash. An applicati...

PT-2026-105893

Summary PyJWT 2.13.0 accepts compact JWS signature segments containing characters that are not in the Base64URL alphabet. Appending !!!! to a valid signature does not change the decoded signature bytes or authenticated claims, but it changes the serialized token and its SHA-256 hash. An applicati...

Rocky Linux 10.0 [CIQ] Security Update: opentelemetry-collector Multiple Vulnerabilities (crlsa-2025_7479)

The Rocky Linux 10.0 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ crlsa-20257479 advisory. go-jose: Go JOSE's Parsing Vulnerable to Denial of Service CVE-2025-27144 golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in...

AlmaLinux 9.2 [TuxCare] Security Update: osbuild-composer / osbuild-composer-core / etc (ALMALINUX9.2:CLSA-2025:1764152728)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1764152728 advisory. - Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web...

PyJWT: Non-canonical signature segments enable raw-token revocation bypass

Summary PyJWT 2.13.0 accepts compact JWS signature segments containing characters that are not in the Base64URL alphabet. Appending !!!! to a valid signature does not change the decoded signature bytes or authenticated claims, but it changes the serialized token and its SHA-256 hash. An applicati...

GHSA-HXM8-2XGR-2P9M PyJWT: Non-canonical signature segments enable raw-token revocation bypass

Summary PyJWT 2.13.0 accepts compact JWS signature segments containing characters that are not in the Base64URL alphabet. Appending !!!! to a valid signature does not change the decoded signature bytes or authenticated claims, but it changes the serialized token and its SHA-256 hash. An applicati...

Improper Verification of Cryptographic Signature

Overview authlib is a library in building OAuth and OpenID Connect servers. Affected versions of this package are vulnerable to Improper Verification of Cryptographic Signature via the JsonWebSignature.deserializejson method in the JWS JSON serialization handling. An attacker can have unsigned or...

CVE-2026-96760

A flaw was found in authlib. This flaw allows a remote attacker to bypass digital signature verification and submit forged data. When processing a JSON Web Signature JWS, a format used to verify data integrity, the deserializejson function marks payloads as successfully verified without validatin...

CVE-2026-96760

Authlib v1.7.2 and below contains a signature verification bypass vulnerability. The JsonWebSignature.deserializejson method accepts a JSON Serialization JWS object and returns the payload as successfully verified without checking for a signature and without requiring a cryptographic key...

EUVD-2026-88465

Authlib v1.7.2 and below contains a signature verification bypass vulnerability. The JsonWebSignature.deserializejson method accepts a JSON Serialization JWS object and returns the payload as successfully verified without checking for a signature and without requiring a cryptographic key...

CVE-2026-96760 Authlib library contains a signature‑verification bypass vulnerability

Authlib v1.7.2 and below contains a signature verification bypass vulnerability. The JsonWebSignature.deserializejson method accepts a JSON Serialization JWS object and returns the payload as successfully verified without checking for a signature and without requiring a cryptographic key...

CVE-2026-96760

The Authlib library (v1.7.2 and below) contains a signature verification bypass vulnerability within the JsonWebSignature.deserialize_json() method. When processing a JSON Serialization JWS object, the method returns the payload as successfully verified without validating a cryptographic signatur...

PT-2026-102339

Name of the Vulnerable Software and Affected Versions Authlib versions prior to 1.7.3 Description An issue exists in the JWS general JSON serialization handler where the JsonWebSignature.deserialize json function accepts a JWS object with an empty signatures array and treats the payload as...