TI-2026-22305 CVE-2026-27962 · GHSA-wvwj-cvrp-7pv5
Authlib JWS JWK Header Injection: Signature Verification Bypass
Priority HIGH 80
Authlib is a Python library which builds OAuth and OpenID Connect servers.
Red Hat Quay 3.14.7
Released 2026-04-09 · Red Hat rating Important · View on Red Hat →
Authlib is a Python library which builds OAuth and OpenID Connect servers.
ajv (Another JSON Schema Validator) before 8.18.0 is vulnerable to Regular Expression Denial of Service (ReDoS) when the $data option is enabled.