TI-2026-36756 CVE-2026-49852 · GHSA-gg9x-qcx2-xmrh
joserfc: HS256/HS384/HS512 verify accepts empty/nil HMAC key (cross-language sibling of CVE-2026-45363)
Priority HIGH 77
joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption (JOSE) standards.