mpdavis
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| python-jose | 2 | – | Nov 2, 2026 |
Exploited and recent CVEs
- CVE-2026-120459 python-jose through 3.5.0 Authentication Bypass via Empty HMAC Key 0.3%
- CVE-2026-85394 python-jose through 3.5.0 Algorithm Confusion via DER-encoded Public Key as HMAC Secret 0.2%