TI-2026-35886 CVE-2026-48526 · GHSA-xgmm-8j9v-c9wx
PyJWT: Public-key JWK accepted as HMAC secret enables forged HS256 tokens when mixed families are allowed
Priority HIGH 68
PyJWT is a JSON Web Token implementation in Python.
RHSA-2026:35837
fence-agents security update
Released 2026-07-06 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream E4S (v.9.2) fence-agents-4.10.0-43.el9_2.23, fence-agents-common-4.10.0-43.el9_2.23, fence-agents-compute-4.10.0-43.el9_2.23 +11
- Red Hat Enterprise Linux High Availability E4S (v.9.2) fence-agents-aliyun-4.10.0-43.el9_2.23, fence-agents-all-4.10.0-43.el9_2.23, fence-agents-amt-ws-4.10.0-43.el9_2.23 +40
- Red Hat Enterprise Linux Resilient Storage E4S (v.9.2) fence-agents-aliyun-4.10.0-43.el9_2.23, fence-agents-all-4.10.0-43.el9_2.23, fence-agents-amt-ws-4.10.0-43.el9_2.23 +39