https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 20:24:25 +0000 https://cve.radiocsirt.org/vuln/cve-2026-30223 <p><strong>Affected:</strong> OliveTin</p> <p>OliveTin gives access to predefined shell commands from a web interface. Prior to version 3000.11.1, when JWT authentication is configured using either &#34;authJwtPubKeyPath&#34; (local RSA public key) or &#34;authJwtHmacSecret&#34; (HMAC secret), the configured audience value (authJwtAud) is not enforced during token parsing. As a result, validly signed JWT tokens with an incorrect aud claim are accepted for authentication. This allows authentication using tokens intended for a different audience/service. This issue has been patched in version 3000.11.1.</p> <p><strong>Affected:</strong> OliveTin</p> <p>OliveTin gives access to predefined shell commands from a web interface. Prior to version 3000.11.1, when JWT authentication is configured using either &#34;authJwtPubKeyPath&#34; (local RSA public key) or &#34;authJwtHmacSecret&#34; (HMAC secret), the configured audience value (authJwtAud) is not enforced during token parsing. As a result, validly signed JWT tokens with an incorrect aud claim are accepted for authentication. This allows authentication using tokens intended for a different audience/service. This issue has been patched in version 3000.11.1.</p> https://cve.radiocsirt.org/vuln/cve-2026-30223