News · via CERT/CC
VU#762428: Authlib library contains a signature‑verification bypass vulnerability
Overview Authlib (versions up to and including 1.7.2) contain a signature‑verification bypass in the JSON Web Signature (JWS) general JSON serialization handling. The…