Lucene search
K

53 matches found

CBLMariner
CBLMariner
added 2022/10/17 10:54 p.m.16 views

CVE-2022-39227 affecting package python-jwt for versions less than 2.4.0-2

CVE-2022-39227 affecting package python-jwt for versions less than 2.4.0-2. A patched version of the package is available...

9.1CVSS9.4AI score0.65414EPSS
Exploits2
CBLMariner
CBLMariner
added 2022/10/13 12:40 a.m.42 views

CVE-2022-39227 affecting package python-jwt 2.4.0-1

CVE-2022-39227 affecting package python-jwt 2.4.0-1. A patched version of the package is available...

9.1CVSS9.6AI score0.65414EPSS
Exploits2
OpenVAS
OpenVAS
added 2022/10/10 12:0 a.m.13 views

Huawei EulerOS: Security Advisory for python-jwt (EulerOS-SA-2022-2434)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.7AI score0.00422EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2022/10/10 12:0 a.m.10 views

Huawei EulerOS: Security Advisory for python-jwt (EulerOS-SA-2022-2421)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.7AI score0.00422EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2022/10/08 12:0 a.m.34 views

EulerOS 2.0 SP10 : python-jwt (EulerOS-SA-2022-2434)

According to the versions of the python-jwt package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - PyJWT is a Python implementation of RFC 7519. PyJWT supports multiple different JWT signing algorithms. With JWT, an attacker submitting the...

7.5CVSS7.4AI score0.00422EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2022/10/08 12:0 a.m.22 views

EulerOS 2.0 SP10 : python-jwt (EulerOS-SA-2022-2421)

According to the versions of the python-jwt package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - PyJWT is a Python implementation of RFC 7519. PyJWT supports multiple different JWT signing algorithms. With JWT, an attacker submitting the...

7.5CVSS7.4AI score0.00422EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2022/09/26 8:49 a.m.40 views

CVE-2022-39227

A flaw was found in python-jwt, where it was subject to Authentication Bypass vulnerability by spoofing, resulting in identity spoofing, session hijacking, or authentication bypass. This flaw allows an attacker who obtains a JWT to arbitrarily forge its contents without knowing the secret key...

9.1CVSS3.7AI score0.65414EPSS
Exploits2References4
OSV
OSV
added 2022/09/23 7:15 a.m.1 views

AZL-11032 CVE-2022-39227 affecting package python-jwt for versions less than 2.4.0-2

python-jwt is a module for generating and verifying JSON Web Tokens. Versions prior to 3.3.4 are subject to Authentication Bypass by Spoofing, resulting in identity spoofing, session hijacking or authentication bypass. An attacker who obtains a JWT can arbitrarily forge its contents without knowi...

9.1CVSS7.4AI score0.65414EPSS
Exploits2References1
NVD
NVD
added 2022/09/23 7:15 a.m.16 views

CVE-2022-39227

python-jwt is a module for generating and verifying JSON Web Tokens. Versions prior to 3.3.4 are subject to Authentication Bypass by Spoofing, resulting in identity spoofing, session hijacking or authentication bypass. An attacker who obtains a JWT can arbitrarily forge its contents without knowi...

9.1CVSS0.65414EPSS
Exploits2References4
Prion
Prion
added 2022/09/23 7:15 a.m.18 views

Authentication flaw

python-jwt is a module for generating and verifying JSON Web Tokens. Versions prior to 3.3.4 are subject to Authentication Bypass by Spoofing, resulting in identity spoofing, session hijacking or authentication bypass. An attacker who obtains a JWT can arbitrarily forge its contents without knowi...

6.4CVSS9.2AI score0.65414EPSS
Exploits2References3Affected Software1
Cvelist
Cvelist
added 2022/09/23 6:55 a.m.23 views

CVE-2022-39227 Python-jwt subject to Authentication Bypass by Spoofing

python-jwt is a module for generating and verifying JSON Web Tokens. Versions prior to 3.3.4 are subject to Authentication Bypass by Spoofing, resulting in identity spoofing, session hijacking or authentication bypass. An attacker who obtains a JWT can arbitrarily forge its contents without knowi...

9.1CVSS9.6AI score0.65414EPSS
Exploits2References4
Vulnrichment
Vulnrichment
added 2022/09/23 6:55 a.m.17 views

CVE-2022-39227 Python-jwt subject to Authentication Bypass by Spoofing

python-jwt is a module for generating and verifying JSON Web Tokens. Versions prior to 3.3.4 are subject to Authentication Bypass by Spoofing, resulting in identity spoofing, session hijacking or authentication bypass. An attacker who obtains a JWT can arbitrarily forge its contents without knowi...

9.1CVSS6.9AI score0.65414EPSS
Exploits2References4
OSV
OSV
added 2022/09/23 6:55 a.m.34 views

CVE-2022-39227 Python-jwt subject to Authentication Bypass by Spoofing

python-jwt is a module for generating and verifying JSON Web Tokens. Versions prior to 3.3.4 are subject to Authentication Bypass by Spoofing, resulting in identity spoofing, session hijacking or authentication bypass. An attacker who obtains a JWT can arbitrarily forge its contents without knowi...

9.1CVSS9.2AI score0.65414EPSS
Exploits2References6
CNNVD
CNNVD
added 2022/09/23 12:0 a.m.2 views

python-jwt 安全漏洞

python-jwt is a Python module for generating and verifying JSON web tokens from the individual developer David Halls. A security vulnerability exists in python-jwt versions prior to 3.3.4 that stems from being affected by spoofing to bypass authentication, which can lead to identity spoofing,...

9.1CVSS8.2AI score0.65414EPSS
Exploits2References5
vulnersOsv
vulnersOsv
added 2022/09/21 9:33 p.m.3 views

aat-downloader (>=0.0.1 <=0.0.3), audittracker (=0.4.0) +30 more potentially affected by CVE-2022-39227 via python-jwt (>=2.0.1 <=3.3.0)

python-jwt PYPI version =2.0.1, =0.0.1, =1.0.1, =0.1.0.2, =6.0.0a1, =0.0.3, =1.0.3, =3.0.27, =0.0.4, =1.0.0, =1.0.6, =0.0.1, =0.5.0 and more Source cves: CVE-2022-39227 Source advisory: OSV:GHSA-5P8V-58QM-C7FP...

9.1CVSS7.2AI score0.65414EPSS
Exploits2
Tenable Nessus
Tenable Nessus
added 2022/09/14 12:0 a.m.36 views

EulerOS 2.0 SP9 : python-jwt (EulerOS-SA-2022-2302)

According to the versions of the python-jwt package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - PyJWT is a Python implementation of RFC 7519. PyJWT supports multiple different JWT signing algorithms. With JWT, an attacker submitting the...

7.5CVSS7.4AI score0.00422EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2022/09/14 12:0 a.m.31 views

EulerOS 2.0 SP9 : python-jwt (EulerOS-SA-2022-2331)

According to the versions of the python-jwt package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - PyJWT is a Python implementation of RFC 7519. PyJWT supports multiple different JWT signing algorithms. With JWT, an attacker submitting the...

7.5CVSS7.4AI score0.00422EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2022/09/14 12:0 a.m.6 views

Huawei EulerOS: Security Advisory for python-jwt (EulerOS-SA-2022-2302)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.7AI score0.00422EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2022/09/14 12:0 a.m.12 views

Huawei EulerOS: Security Advisory for python-jwt (EulerOS-SA-2022-2331)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.7AI score0.00422EPSS
Exploits0References2
vulnersOsv
vulnersOsv
added 2022/09/01 6:51 p.m.1 views

cizohosubscriptions (>=1.0.1 <=1.0.2), code-challenge (>=0.1.0.2 <=0.1.0.8) +7 more potentially affected by CVE-2022-39227 via python-jwt (>=3.2.4 <=3.3.0)

python-jwt PYPI version =3.2.4, =1.0.1, =0.1.0.2, =6.0.0a1, =0.0.3, =1.0.1, =2.0.5, =2.0.6, =2.0.7 - zoho-subscriptions =1.0.1 Source cves: CVE-2022-39227 Source advisory: OSV:PYSEC-2022-259...

9.1CVSS7.2AI score0.65414EPSS
Exploits2
Rows per page
Query Builder