USN-8916-1: PyJWT vulnerabilities
AI Summary
YuSung Han discovered that PyJWT did not properly validate certain JWK keys when performing HMAC verification. An attacker could possibly use this issue to forge authentication tokens. This issue only affected Ubuntu 26.04 LTS.
Discussion
Sign in to join the discussion.
Loading comments…