https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T22:55:26.573701+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-26342 EUVD-2026-26342 2026-10-06T22:55:26.577851+00:00 EUVD-2026-26342 https://cve.radiocsirt.org/vuln/fkie_cve-2021-29451 fkie_cve-2021-29451 2026-10-06T22:55:26.577882+00:00

Portofino is an open source web development framework. Portofino before version 5.2.1 did not properly verify the signature of JSON Web Tokens. This allows forging a valid JWT. The issue will be patched in the upcoming 5.2.1 release.

 https://cve.radiocsirt.org/vuln/ghsa-6g3c-2mh5-7q6x GHSA-6g3c-2mh5-7q6x — Missing validation of JWT signature in `ManyDesigns/Portofino` 2026-10-06T22:55:26.577911+00:00

Affected: Maven: com.manydesigns:portofino-dispatcher, Maven: com.manydesigns:portofino-core

### Impact [Portofino](https://github.com/ManyDesigns/Portofino) is an open source web development framework. Portofino before version 5.2.1 did not properly verify the signature of JSON Web Tokens. This allows forging a valid JWT.

### Patches The issue will be patched in the upcoming 5.2.1 release.

### For more information If you have any questions or comments about this advisory: * Open an issue in [https://github.com/ManyDesigns/Portofino](https://github.com/ManyDesigns/Portofino)

 https://cve.radiocsirt.org/vuln/gsd-2021-29451 gsd-2021-29451 2026-10-06T22:55:26.577940+00:00 gsd-2021-29451