https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T14:37:49.941123+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2026-avi-1233 certfr-2026-avi-1233 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-03T14:37:49.969061+00:00 certfr-2026-avi-1233 https://cve.radiocsirt.org/vuln/cleanstart-2026-jq90440 CLEANSTART-2026-JQ90440 — joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption (JOSE) standa… 2026-10-03T14:37:49.969091+00:00

Affected: CleanStart: airflow-3

Security vulnerability affects the airflow-3 package. joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption (JOSE) standards.

 https://cve.radiocsirt.org/vuln/euvd-2026-358851 EUVD-2026-358851 2026-10-03T14:37:49.969120+00:00 EUVD-2026-358851 https://cve.radiocsirt.org/vuln/fkie_cve-2026-75509 fkie_cve-2026-75509 2026-10-03T14:37:49.969133+00:00

joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption (JOSE) standards. Prior to version 1.7.3, JWTClaimsRegistry applies membership matching to list-valued iss and sub claims, allowing an array-valued iss that contains the expected issuer to pass an intended equality check and enabling issuer-validation bypass. This issue is fixed in version 1.7.3.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-75509 UBUNTU-CVE-2026-75509 2026-10-03T14:37:49.969154+00:00

Affected: Ubuntu:26.04:LTS: joserfc

joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption (JOSE) standards. Prior to version 1.7.3, JWTClaimsRegistry applies membership matching to list-valued iss and sub claims, allowing an array-valued iss that contains the expected issuer to pass an intended equality check and enabling issuer-validation bypass. This issue is fixed in version 1.7.3.