CVE-2026-27962 PUBLISHED CVSS 9.100000381469727 CRITICAL

Authlib JWS JWK Header Injection: Signature Verification Bypass

EPSS 0.05% · 17.1th percentile

Risk Scores

CVSS v3.1
9.100000381469727
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
EPSS Score
0.05%
17.1th percentile

Affected Products

VendorProductVersions
PyPIauthlib0, 0, 0
authlibauthlib0, < 1.6.9, < 1.6.9

Timeline

References

Open in Interactive Console →