PyJWT regression

USN-5526-1 fixed vulnerabilities in PyJWT. Unfortunately this caused a regression by incrementing the internal package version number on Ubuntu 22.04 LTS. This update fixes the problem. We apologize f ...

Continue Reading
2FA Bypass in Cockpit Content Platform ? v2.2.1

# Description 2FA secret is disclosed in JWT token after user logs into his account in Cockpit Content Platform ? v2.2.1 allowing attacker to bypass the 2FA code. # Proof of Concept 1.Login with your ...

Continue Reading
RHEL 9 : Red Hat JBoss Enterprise Application Platform 7.4.6 Security update. (Moderate) (RHSA-2022:5894)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:5894 advisory. - minimist: prototype pollution (CVE-2021 ...

Continue Reading
CVE-2022-29217

PyJWT is a Python implementation of RFC 7519. PyJWT supports multiple different JWT signing algorithms. With JWT, an attacker submitting the JWT token can choose the used signing algorithm. The PyJWT ...

Continue Reading

CVSS3 - HIGH

CVSS2 - MEDIUM

(RHSA-2022:5894) Moderate: Red Hat JBoss Enterprise Application Platform 7.4.6 Security update.

Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly application runtime. This release of Red Hat JBoss Enterprise Application Platform 7.4.6 is a ...

Continue Reading

CVSS3 - CRITICAL

CVSS2 - HIGH

[SECURITY] Fedora 36 Update: golang-github-dgrijalva-jwt-3.2.0-12.fc36

Golang implementation of json web tokens (jwt).Read More ...

Continue Reading
[SECURITY] Fedora 36 Update: golang-github-jwt-3.2.2-4.fc36

A go implementation of JSON Web Tokens. Supports the parsing and verification, as well as the generation and signing of JWTs.Read More ...

Continue Reading
Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : PyJWT vulnerability (USN-5526-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5526-1 advisory. - PyJWT is a Python implementation of R ...

Continue Reading

Back to Main

Subscribe for the latest news: