https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 01:02:55 +0000 https://cve.radiocsirt.org/vuln/cve-2020-26160 <p>jwt-go before 4.0.0-preview1 allows attackers to bypass intended access restrictions in situations with []string{} for m[&#34;aud&#34;] (which is allowed by the specification). Because the type assertion fails, &#34;&#34; is the value of aud. This is a security problem if the JWT token is presented to a service that lacks its own audience check.</p> <p>jwt-go before 4.0.0-preview1 allows attackers to bypass intended access restrictions in situations with []string{} for m[&#34;aud&#34;] (which is allowed by the specification). Because the type assertion fails, &#34;&#34; is the value of aud. This is a security problem if the JWT token is presented to a service that lacks its own audience check.</p> https://cve.radiocsirt.org/vuln/cve-2020-26160