PVE-2022-49499

Advisory

More.jwtauth 0.9 passes algorithm explicit to 'jwt.decode()' to avoid access control bypa…

[This advisory has been limited. Please create a free account to view the full advisory.]

Affected package

Affected versions

Fixed versions

Vulnerability changelog

---------------- - **New:** Add an API to refresh the JWT token (see issue `6`_). Thi…

[This text has been limited. Please create a free account to view the full text.]

Resources

• https://pypi.org/project/more.jwtauth
• https://pyup.io/changelogs/more.jwtauth/