Lucene search
+L

2 matches found

Cvelist
Cvelist
•added 2026/09/28 8:26 p.m.•26 views

CVE-2026-102268 PyJWT: Asymmetric-PEM detection bypass: whitespace/line-ending-mutated public keys skip the HS/asymmetric confusion guard

PyJWT is a Python implementation of JSON Web Token standards. Prior to 2.14.0, ispemformat in jwt/utils.py is affected because ispemformat does not recognize every PEM representation accepted by the cryptography loader. This occurs when an application mixes HMAC and asymmetric algorithms and...

9.1CVSS0.00196EPSS
SaveExploits0References3
Rows per page
Query Builder