mpdavis

Products

ProductCVEsExploitedLatest
python-jose2–Nov 2, 2026

Exploited and recent CVEs

  • CVE-2026-120459 High 7.4 python-jose through 3.5.0 Authentication Bypass via Empty HMAC Key 0.3%
  • CVE-2026-85394 Critical 9.1 python-jose through 3.5.0 Algorithm Confusion via DER-encoded Public Key as HMAC Secret 0.2%