CVE-2026-102946 - joserfc: JWS signature verification bypass via empty signatures array in jws.deserialize_json
CVE ID :CVE-2026-102946 Published : Oct. 15, 2026, 7:17 p.m. | 16 minutes ago Description :joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption (JOSE) standards. Prior to 1.7.4, joserfc.jws.deserialize_json() accepts a JWS General JSON...