HashiCorp Vault Incorrectly Validated JSON Web Tokens (JWT) Audience Claims in github.com/hashicorp/vault

HashiCorp Vault Incorrectly Validated JSON Web Tokens (JWT) Audience Claims in...Read More ...

Continue Reading
Openshift/telemeter: iss check during jwt authentication can be bypassed in github.com/openshift/telemeter

Openshift/telemeter: iss check during jwt authentication can be bypassed in...Read More ...

Continue Reading
Malicious code in jwt-angular11-client (npm)

-= Per source details. Do not edit below this...Read More ...

Continue Reading
Fedora: Security Advisory for python-authlib (FEDORA-2024-2e9c58d661)

The remote host is missing an update for...Read More ...

Continue Reading
Fedora: Security Advisory for python-authlib (FEDORA-2024-7cc9a030d9)

The remote host is missing an update for...Read More ...

Continue Reading
[SECURITY] Fedora 39 Update: python-authlib-1.3.1-1.fc39

Python library for building OAuth and OpenID Connect servers. JWS, JWK, JWA, JWT are...Read More ...

Continue Reading
[SECURITY] Fedora 40 Update: python-authlib-1.3.1-1.fc40

Python library for building OAuth and OpenID Connect servers. JWS, JWK, JWA, JWT are...Read More ...

Continue Reading
BIT-vault-2024-5798

Vault and Vault Enterprise did not properly validate the JSON Web Token (JWT) role-bound audience claim when using the Vault JWT auth method. This may have resulted in Vault validating a JWT the audie ...

Continue Reading

Back to Main

Subscribe for the latest news: