CVE-2026-25537 vulnerabilities

Vulnerabilities for packages: uv, wasmcloud, lakekeeper, sccache, zed, lychee, py3-xet-core, codex, komodo, qdrant...

Linux Distros Unpatched Vulnerability : CVE-2026-25537

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - jsonwebtoken is a JWT lib in rust. Prior to version 10.3.0, there is a Type Confusion vulnerability in jsonwebtoken, specifically, in its claim validation logic...

CVE-2026-25537

creationtimestamp| type| source ---|---|--- 2026-02-03 11:57:38+00:00| published-proof-of-concept| https://github.com/Keats/jsonwebtoken/security/advisories/GHSA-h395-gr6q-cpjc 2026-02-10 12:44:46+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3meiyjelg7s25 2026-02-10...