JO
Product
joserfc
by authlib · last CVE Oct 15, 2026
6
CVEs
0
On KEV
9.1
Max CVSS
1
New 30D
Severity mix
Critical 1High 2Medium 2Low 1
Watch

Add joserfc to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-102946
9.1
0%
Oct 15
joserfc: JWS signature verification bypass via empty signatures array in jws.deserialize_json
Affected: < 1.7.4
Showing 1