All 2 CVE vulnerabilities found in python-jose, with AI-generated Chinese analysis, references, and POCs.
Vendor: mpdavis
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-120459 | python-jose through 3.5.0 Authentication Bypass via Empty HMAC Key CWE-347 | 7.4 | High | 2026-11-02 |
| CVE-2026-85394 | python-jose through 3.5.0 Algorithm Confusion via DER-encoded Public Key as HMAC Secret CWE-347 | 9.1 | Critical | 2026-09-03 |
All 2 known CVE vulnerabilities affecting python-jose with full Chinese analysis, references, and POCs where available.