Visit Website →

Recent Items

msrc_CVE-2026-19445 — Use-after-free of a server-side SSLContext when sni_callback switches contexts

msrc_CVE-2026-19445
Published on 2026-10-03T01:42:29+00:00
Updated on 2026-10-07T02:22:53+00:00

msrc_CVE-2026-19553 — SSLContext.wrap_bio() missing validation of server_hostname parameter

msrc_CVE-2026-19553
Published on 2026-10-03T01:42:00+00:00
Updated on 2026-10-07T02:22:33+00:00

msrc_CVE-2026-103001 — PyJWT.decode() reintroduces options-dict mutation, enabling silent claim-verification bypass on dict reuse

msrc_CVE-2026-103001
Published on 2026-10-03T01:35:48+00:00
Updated on 2026-10-07T02:21:24+00:00

msrc_CVE-2026-102266 — PyJWK accepts empty HMAC keys, bypassing PyJWT's empty-key validation

msrc_CVE-2026-102266
Published on 2026-10-01T01:17:54+00:00
Updated on 2026-10-07T02:09:02+00:00

msrc_CVE-2026-102274 — PyJWT: Malformed RSA JWK aborts parsing of an entire JWK Set

msrc_CVE-2026-102274
Published on 2026-10-01T01:17:32+00:00
Updated on 2026-10-07T02:08:41+00:00

msrc_CVE-2026-102275 — PyJWT accepts inconsistent OKP x/d JWKs, causing public/private key identity confusion

msrc_CVE-2026-102275
Published on 2026-10-01T01:17:09+00:00
Updated on 2026-10-07T02:08:20+00:00

msrc_CVE-2026-102265 — PyJWT: Uncaught RecursionError in jwt.decode() on deeply nested token header

msrc_CVE-2026-102265
Published on 2026-10-01T01:16:46+00:00
Updated on 2026-10-07T02:08:00+00:00

msrc_CVE-2026-102273 — PyJWT accepts public JWK containers as HMAC secrets

msrc_CVE-2026-102273
Published on 2026-10-01T01:16:25+00:00
Updated on 2026-10-07T02:07:40+00:00

msrc_CVE-2026-102272 — PyJWT BOM Bypass

msrc_CVE-2026-102272
Published on 2026-10-01T01:16:00+00:00
Updated on 2026-10-07T02:07:20+00:00

msrc_CVE-2026-102271 — PyJWT: Public keys in DER form are accepted as HMAC secrets, bypassing the CVE-2022-29217 guard

msrc_CVE-2026-102271
Published on 2026-10-01T01:15:36+00:00
Updated on 2026-10-07T02:07:00+00:00