CVE-2026-102272 PyJWT BOM Bypass

PyJWT is a Python implementation of JSON Web Token standards. From 2.13.0 until 2.14.0, HMACAlgorithm.preparekey in jwt/algorithms.py is affected because raw-JWK detector does not normalize accepted Unicode byte-order marks before checking for JSON. This occurs when a public JWK is prefixed with ...

CVE-2026-102272 PyJWT BOM Bypass

PyJWT is a Python implementation of JSON Web Token standards. From 2.13.0 until 2.14.0, HMACAlgorithm.preparekey in jwt/algorithms.py is affected because raw-JWK detector does not normalize accepted Unicode byte-order marks before checking for JSON. This occurs when a public JWK is prefixed with ...

CVE-2026-102271

The PyJWT Python library (versions 2.4.0 through 2.14.0 ) is vulnerable in the HMACAlgorithm.prepare_key function. The root cause is that the asymmetric-key guard relies on textual markers that are missing from DER encoding . When an application mixes HMAC and asymmetric algorithms and provides a...

CVE-2026-102271 PyJWT: Public keys in DER form are accepted as HMAC secrets, bypassing the CVE-2022-29217 guard

PyJWT is a Python implementation of JSON Web Token standards. From 2.4.0 until 2.14.0, PyJWT HMACAlgorithm.preparekey is affected because asymmetric-key guard relies on textual markers that are absent from DER encoding. This occurs when an application mixes HMAC and asymmetric algorithms and...

EUVD-2026-88539

PyJWT is a Python implementation of JSON Web Token standards. From 2.4.0 until 2.14.0, PyJWT HMACAlgorithm.preparekey is affected because asymmetric-key guard relies on textual markers that are absent from DER encoding. This occurs when an application mixes HMAC and asymmetric algorithms and...

CVE-2026-102271

PyJWT is a Python implementation of JSON Web Token standards. From 2.4.0 until 2.14.0, PyJWT HMACAlgorithm.preparekey is affected because asymmetric-key guard relies on textual markers that are absent from DER encoding. This occurs when an application mixes HMAC and asymmetric algorithms and...

CVE-2026-102268 PyJWT: Asymmetric-PEM detection bypass: whitespace/line-ending-mutated public keys skip the HS/asymmetric confusion guard

PyJWT is a Python implementation of JSON Web Token standards. Prior to 2.14.0, ispemformat in jwt/utils.py is affected because ispemformat does not recognize every PEM representation accepted by the cryptography loader. This occurs when an application mixes HMAC and asymmetric algorithms and...

CVE-2026-102268 PyJWT: Asymmetric-PEM detection bypass: whitespace/line-ending-mutated public keys skip the HS/asymmetric confusion guard

PyJWT is a Python implementation of JSON Web Token standards. Prior to 2.14.0, ispemformat in jwt/utils.py is affected because ispemformat does not recognize every PEM representation accepted by the cryptography loader. This occurs when an application mixes HMAC and asymmetric algorithms and...

CVE-2026-102268

The PyJWT library (versions prior to 2.14.0 ) contains a vulnerability in jwt/utils.py where the is_pem_format function fails to recognize certain PEM representations accepted by the cryptography loader. This occurs when applications mixing HMAC and asymmetric algorithms provide mutated public-ke...

jwt-spoof-tool

jwt-spoof-tool 工具描述 : 我制作这个工具是为了学习目的，并自动化 jwt 令牌劫持，而无需依赖 使用 burpsuite 代码有完善的文档，且易于理解 基于 CVE-2018-0114 该漏洞之所以发生，是因为在后端，服务器会检查嵌入在 jwt 标头中的 jwk 对象，其中包含 n 和 e，它们是用于构成公钥的 2 个参数 如何利用 : 1 攻击者生成新的 RSA 密钥对， 2 获取 n 和 e，并将它们注入到 jwt 标头中的 jwk 对象内 3 更改 jwt 正文部分中的任意值，然后用其私钥签名 4 服务器使用攻击者的公钥来验证签名 。 5...

CVE-2018-0114

CVE-2018-0114 用于JWT生成的python2.7脚本 CVE-2018-0114 A vulnerability in the Cisco node-jose open source library before 0.11.0 could allow an unauthenticated, remote attacker to re-sign tokens using a key that is embedded within the token. The vulnerability is due to node-jose following the JSON Web...

CVE-2026-48558

CVE-2026-48558：SimpleHelp OIDC 认证绕过 !WARNING 此代码按“原样”提供，仅用于教育和研究目的。 请勿在生产系统、共享环境或任何未经授权的目标上使用此 PoC。 此漏洞利用演示了一个严重的远程代码执行（RCE）漏洞（CVE-2026-6307），可完全攻破 Chrome 渲染器沙箱。 运行或托管此代码可能触发防病毒检测、安全监控警报，若被误用还可能导致法律后果。 作者和仓库维护者对此代码造成的任何损害、误用或非法活动不承担任何责任 。 仅在获得适当授权的隔离实验室环境中使用。 仅用于防御性研究、漏洞分析和蓝队测试。 作者： J4ck3LSyN 描述...

CVE-2026-4444-JWT-Algorithm-Confusion-via-kid-Injection

CVE-2026-4444 – Confusión de algoritmo JWT mediante inyección de kid Código del programa servidor Node.js + exploit en Python // jwtserver.js - Vulnerable JWT verification server const express = require'express'; const jwt = require'jsonwebtoken'; const jwksClient = require'jwks-rsa'; const axios...

cve-2022-39227-jwt-auth-bypass-demo

CVE-2022-39227 JWT 身份验证绕过演示 项目目标 本项目在受控的本地实验室环境中演示 CVE-2022-39227 漏洞。该漏洞影响 python-jwt 库（版本 3.3.4），允许攻击者在不了解密钥的情况下，通过利用 python-jwt 与其依赖 jwcrypto 之间的解析不一致性（JWS 序列化）来伪造 JWT 声明。 技术栈 Python 3.9 Flask （Web 框架） python-jwt 3.3.3 （存在漏洞的版本） python-jwt 3.3.4 （已修复/修补的版本） Docker 和 Docker Compose 项目架构 该项目使用...

cve-2026-21858

CVE-2026-21858 + CVE-2025-68613 - Cadena Completa de n8n Lectura Arbitraria de Archivos sin Autenticación → Forja de Token de Admin → Bypass de Sandbox → RCE | ---|--- CVE| CVE-2026-21858 AFR + CVE-2025-68613 RCE CVSS| 10.0 + 9.9 Crítico Afectado| = 0.211.0 RCE Corregido| 1.121.0 AFR / 1.120.4+ R...

CVE-2026-102268: Improper Verification of Cryptographic Signature

PyJWT is a Python implementation of JSON Web Token standards. Prior to 2.14.0, ispemformat in jwt/utils.py is affected because ispemformat does not recognize every PEM representation accepted by the cryptography loader. This occurs when an application mixes HMAC and asymmetric algorithms and...

CVE-2025-68860

CVE-2025-68860 WordPress Mobile builder 插件 使用替代路径或渠道绕过身份验证 漏洞存在于 Mobile Builder 中，可导致身份验证滥用。此漏洞影响 Mobile builder 从 n/a 到 1.4.2 版本。 CVSS 评分： 9.8 严重 向量： AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 远程攻击者可以构造有效身份验证令牌，无需任何预先交互或凭证即可获取管理员访问权限，从而导致 WordPress 安装完全沦陷。 ⚙️ 脚本说明 CVE-2025-68860.py 是一个完全自动化的漏洞利用脚本，针对...

POC_CVE-2015-9235

CVE-2015-9235 演示针对 JSON Web Token JWT 库的算法混淆攻击。JWT 通常用于 Cookie 中认证用户会话，因此该攻击至关重要。使用 Node 模块 [email protected] 来展示此漏洞。 该项目也是一次愉快的 vibe coding 活动，因为前端（除 API 调用外）几乎完全由 LLM 完成。 漏洞 JWT 的格式如下： b64header.b64payload.b64signature 在我们的场景中： header = algorithm, type payload = username, role 在当时，各种 JWT...

CVE-2025-59390-

CVE-2025-59390- 所附的POC将允许您破解Apache Druid中的Kerberos签名，以及任何由ThreadLocalRandom生成的整数。 安全公告 - Apache...

EUVD-2026-85920

A path traversal vulnerability was found in pulpcore. The content upload API accepts a 'fileurl' parameter that allows users with file repository privileges to specify a local file URL for Pulp to download and store. A URL scheme validation check uses a string prefix comparison that only rejects...