Most recent entries from csaf_microsoft

Visit Website →

Recent Items

msrc_CVE-2026-19445 — Use-after-free of a server-side SSLContext when sni_callback switches contexts

msrc_CVE-2026-19445

Published on Sat, 03 Oct 2026 01:42:29 +0000

msrc_CVE-2026-19553 — SSLContext.wrap_bio() missing validation of server_hostname parameter

msrc_CVE-2026-19553

Published on Sat, 03 Oct 2026 01:42:00 +0000

msrc_CVE-2026-103001 — PyJWT.decode() reintroduces options-dict mutation, enabling silent claim-verification bypass on dict reuse

msrc_CVE-2026-103001

Published on Sat, 03 Oct 2026 01:35:48 +0000

msrc_CVE-2026-102266 — PyJWK accepts empty HMAC keys, bypassing PyJWT's empty-key validation

msrc_CVE-2026-102266

Published on Thu, 01 Oct 2026 01:17:54 +0000

msrc_CVE-2026-102274 — PyJWT: Malformed RSA JWK aborts parsing of an entire JWK Set

msrc_CVE-2026-102274

Published on Thu, 01 Oct 2026 01:17:32 +0000

msrc_CVE-2026-102275 — PyJWT accepts inconsistent OKP x/d JWKs, causing public/private key identity confusion

msrc_CVE-2026-102275

Published on Thu, 01 Oct 2026 01:17:09 +0000

msrc_CVE-2026-102265 — PyJWT: Uncaught RecursionError in jwt.decode() on deeply nested token header

msrc_CVE-2026-102265

Published on Thu, 01 Oct 2026 01:16:46 +0000

msrc_CVE-2026-102273 — PyJWT accepts public JWK containers as HMAC secrets

msrc_CVE-2026-102273

Published on Thu, 01 Oct 2026 01:16:25 +0000

msrc_CVE-2026-102272 — PyJWT BOM Bypass

msrc_CVE-2026-102272

Published on Thu, 01 Oct 2026 01:16:00 +0000

msrc_CVE-2026-102271 — PyJWT: Public keys in DER form are accepted as HMAC secrets, bypassing the CVE-2022-29217 guard

msrc_CVE-2026-102271

Published on Thu, 01 Oct 2026 01:15:36 +0000