Vulnerabilities
Patch PyJWT 2.13.0 to Stop Empty Key Token Forgery Attacks
A high-severity flaw in PyJWT allows attackers to forge tokens using empty keys. Users must upgrade to version 2.14.0 immediately to block this authentication bypass.
JWT
Everything Patch Review has reported about JWT: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Patch ZKEACMS 4.4 to Block Authentication Bypass Vulnerability
A high-severity flaw in ZKEACMS allows unauthenticated attackers to forge admin tokens and manipulate content without a proper login.