Skip to content
OpenAdvisories

Package · PyPI

commonground-api-common

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Low —

    commonground-api-common unexploitable privilege escalation in JWT authentication middleware

    ### Impact This is a privilege escalation vulnerability. The impact is negligible and entirely theoretical. A non-exploitable weakness was found in how the client-supplied JWTs are verified. Because an explicit allow-list of known algorithms is used in the Py…