Aller au contenu
en Se connecter
9.1 Critique

CVE-2026-27962 Authlib is a Python library which builds OAuth and OpenID Connect servers

Description

Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to version 1.6.9, a JWK Header Injection vulnerability in authlib's JWS implementation allows an unauthenticated attacker to forge arbitrary JWT tokens that pass signature verification. When key=None is passed to any JWS deserialization function, the library extracts and uses the cryptographic key embedded in the attacker-controlled JWT jwk header field. An attacker can sign a token with their own private key, embed the matching public key in the header, and have the server accept the forged token as cryptographically valid — bypassing authentication and authorization entirely. This issue has been patched in version 1.6.9.

Produits et versions touchés

Produit Versions touchées Corrigé en
Red Hat Quay 3.14 1775512163 premières → < 1775512163 1775512163
Red Hat Quay 3.15 1780891395 premières → < 1780891395 1780891395
Red Hat Quay 3.16 1779204086 premières → < 1779204086 1779204086
Red Hat Quay 3.1 1773971077 premières → < 1773971077 1773971077
Lightspeed Core Versions non publiées
Red Hat Ansible Automation Platform 2 Versions non publiées
Red Hat OpenShift AI (RHOAI) Versions non publiées
Red Hat Satellite 6 Versions non publiées
authlib 1.6 premières → < 1.6.9 1.6.9
Afficher les 2 autres branches
Produit Versions touchées Corrigé en
Red Hat Quay 3.10 1773971077 premières → < 1773971077 1773971077
Red Hat Quay 3.18 1784987273 premières → < 1784987273 1784987273

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Red Hat Quay 3.14

Les 28 CVE de Red Hat Quay 3.14 →
CVE-2026-18255 A flaw was found in Quay 7.2 Élevée CVE-2026-15927 A flaw was found in Red Hat Quay's repository-level mirror configuration feature 6.8 Moyenne CVE-2026-42039 Axios is a promise based HTTP client for the browser and Node.js 6.9 Moyenne CVE-2026-42041 Axios is a promise based HTTP client for the browser and Node.js 4.8 Moyenne
Suivre cette CVE