tocsin

Debian/python-authlib: high 7.5

Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to version 1.6.5, Authlib’s JOSE implementation accepts unbounded JWS/JWT header and signature segments. A remote attac

Action: Upgrade python-authlib to 1.2.0-1+deb12u1 or later.

Affected

introducedfixedlast affected
01.2.0-1+deb12u1-

Fixed versions

1.2.0-1+deb12u1

Sources

published · modified · JSON