CVE-2026-73178

Apache Syncope is vulnerable to a JWT Access Token takeover (Exposure of Sensitive Information to an Unauthorized Actor). An administrator with adequate entitlements can retrieve the list of existing Access Tokens via REST, including their signed JWT body . These tokens can then be replayed to im...

EUVD-2025-5589

Malicious code in bioql PyPI...

CVE-2025-25953

Serosoft Solutions Pvt Ltd Academia Student Information System SIS EagleR v1.0.118 was discovered to contain an Azure JWT access token exposure. This vulnerability allows authenticated attackers to escalate privileges and access sensitive information...