Skip to content
OpenAdvisories

Product · authlib

joserfc

9 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 2.3
    CVE-2026-62995

    joserfc accepts JWT with padding, leading to JWT malleability

    joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption (JOSE) standards. in versions 1.7.1 and prior, joserfc accepts JWTs with trailing padding (==) which are not conforming to the JOSE specifications. This …

    authlib joserfc joserfc joserfc Debian Ubuntu