Login Request a demo
JO
Product
joserfc
by authlib · last CVE Oct 15, 2026
6
CVEs
0
On KEV
9.1
Max CVSS
1
New 30D
Vulnerabilities6In the news0Timeline
Severity mix
Critical 1High 2Medium 2Low 1
Severity
All severities6Critical1High2Medium2Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add joserfc to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-49852
8.7
0%
Jul 17
joserfc: HS256/HS384/HS512 verify accepts empty/nil HMAC key (cross-language sibling of CVE-2026-45363)
Affected: < 1.6.8
CVE-2026-27932
7.5
0%
Mar 3
joserfc PBES2 p2c Unbounded Iteration Count enables Denial of Service (DoS)
Affected: <= 1.6.2
Showing 2