Mpdavis

2 CVEs in 1 Mpdavis product, including Python-Jose. Newest: CVE-2026-120459 (2026-11-02). Severity, EPSS and public exploits for each.

Mpdavis products with known CVEs

ProductCVEs
Python-Jose2
Mpdavis CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-120459High7.42026-11-02python-jose through 3.5.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge JWTs because HMACKey and CryptographyH…
CVE-2026-85394Critical9.12026-09-03python-jose through 3.5.0 fails to properly validate asymmetric keys in HMAC initialization, accepting DER-encoded public keys that lack PEM armor or SSH prefi…