Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat OpenShift Virtualization 4/openshift-virtualization/ocp-virt-validation-checkup-rhel9
Red Hat
· Package
11 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Authlib: empty signatures validation in JWS JSON deserialization
CVE-2026-96760 · GHSA-6V38-4H7W-RJ9H
authlib
Exploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9
PyPI
Red Hat
Critical
Fix reported
2026-10-27
PyJWT accepts inconsistent OKP x/d JWKs, causing public/private key identity confusion
CVE-2026-102275 · GHSA-X33G-CR3X-6449
Version ranges need review.
pyjwt
Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9
PyPI
Red Hat
Medium
Fix reported
2026-10-07
PyJWT: PyJWKClient still amplifies unauthenticated JWKS fetches on unknown kid values (incomplete fix of CVE-2026-48524)
CVE-2026-101917 · GHSA-2GX3-RCP4-G85Q
Version ranges need review.
pyjwt
Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9
PyPI
Red Hat
Medium
Fix reported
2026-10-01
AnyIO: TLSStream IDNA 2003 host name encoding enables potential TLS certificate spoofing
CVE-2026-63374 · GHSA-82R6-8W77-94W6
Version ranges need review.
anyio
Confidential Compute Attestation/agent-sandbox/agent-sandbox-router
PyPI
Red Hat
Critical
Fix reported
2026-10-01
PyJWT: Unauthenticated RecursionError DoS in pre-verification payload parse (PyJWKClient.get_signing_key_from_jwt / verify_signature=False)
CVE-2026-101918 · GHSA-42VR-XJ54-VC7V
Version ranges need review.
pyjwt
Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9
PyPI
Red Hat
Medium
Fix reported
2026-10-01
PyJWT: Non-canonical signature segments enable raw-token revocation bypass
CVE-2026-102269 · GHSA-HXM8-2XGR-2P9M
Version ranges need review.
pyjwt
Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9
PyPI
Red Hat
Medium
Fix reported
2026-10-01
PyJWT: Malformed RSA JWK aborts parsing of an entire JWK Set
CVE-2026-102274 · GHSA-W6J9-CWV2-H6WQ
Version ranges need review.
pyjwt
Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9
PyPI
Red Hat
Medium
Fix reported
2026-10-01
PyJWT: Uncaught RecursionError in jwt.decode() on deeply nested token header
CVE-2026-102265 · GHSA-8WJV-2P76-3863
Version ranges need review.
pyjwt
Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9
PyPI
Red Hat
Medium
Fix reported
2026-10-01
PyJWT: ReDoS vulnerability when calling the `is_pem_format` function.
CVE-2026-102270 · GHSA-JWRC-G2Q2-PQ5P
Version ranges need review.
pyjwt
Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9
PyPI
Red Hat
Medium
Fix reported
2026-10-01
python: python: Certificate verification bypass via missing server_hostname validation in SSLContext.wrap_bio()
CVE-2026-19553
Red Hat Enterprise Linux 7/python3
Red Hat Enterprise Linux 8/python3.11
Red Hat
High
No fix reported
Not recorded
authlib: authlib: Information disclosure via unvalidated discovery metadata
CVE-2026-104056
Exploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9
Lightspeed Core/lightspeed-core/lightspeed-stack-rhel9
Red Hat
Medium
No fix reported
Not recorded
