Zetlyn
GitHubGet started

vendor

authlib

3 thingsrelated by NVD
Severity
critical 2 high 3

Its products

authlib 3

Being told

Watch: its feed Ask more of it

The feed says each thing that enters, leaves or changes; a reader adds its address, /zetlyn/trackers/cve/things.atom?q=…, to theirs.

Every thing

authlib: Authlib: Signature verification bypass via malicious JWT allows unauthorized access
CVE-2026-28802
Severity critical
authlib: Authlib: Authentication bypass via forged OpenID Connect ID Tokens
CVE-2026-28498
Severity high
authlib: Authlib: Authentication bypass due to JWK Header Injection vulnerability
CVE-2026-27962
Severity critical