JO
Product
joserfc
by authlib · last CVE Oct 29, 2026
9
CVEs
0
On KEV
9.1
Max CVSS
3
New 30D
Severity mix
Critical 1High 4Medium 3Low 1
Watch

Add joserfc to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-102946
9.1
0%
Oct 15
joserfc: JWS signature verification bypass via empty signatures array in jws.deserialize_json
Affected: < 1.7.4
Showing 1