Vulnerability in Authlib Joserfc
CVE-2026-62995
joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption (JOSE) standards. in versions 1.7.1 and prior, joserfc accepts JWTs with trailing padding (==) which are not conforming to the JOSE…
Affected products
- Authlib Joserfc — versions < 1.7.2
Weakness classification (CWE)
References
- security-advisories@github.com (x_refsource_CONFIRM)