https://vulnerability.circl.lu/sightings/feed 2026-09-30T16:57:43.577391+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/016fca5e-0aa6-4aa9-819e-62c55cdfe9b1/export 2026-09-30T16:57:43.607058+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "016fca5e-0aa6-4aa9-819e-62c55cdfe9b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96760", "type": "seen", "source": "https://bsky.app/profile/forsmile.jp/post/3mwnkqbqft224", "content": "\u3010\u4fee\u6b63\u7248\u306a\u3057\u3011Authlib \u306b\u7f72\u540d\u691c\u8a3c\u306e\u56de\u907f\uff08CVE-2026-96760\uff09\u3002signatures \u304c\u7a7a\u914d\u5217\u306eJWS\u3092\u300c\u691c\u8a3c\u6e08\u307f\u300d\u3068\u3057\u3066\u8fd4\u3057\u307e\u3059\u3002\u9375\u3082\u7f72\u540d\u3082\u8981\u308a\u307e\u305b\u3093\u3002\n\nCVE\u306f\u300c1.7.2\u4ee5\u4e0b\u300d\u3068\u3057\u3066\u3044\u307e\u3059\u304c\u3001jws.py \u306f v1.7.2\u30fbv1.8.0\u30fbmaster \u3067\u540c\u4e00\u30d5\u30a1\u30a4\u30eb\u3067\u3057\u305f\u3002\u5bfe\u8c61\u306fJWS\u306eJSON\u5f62\u5f0f\u3092\u53d7\u3051\u53d6\u308b\u7d4c\u8def\u3060\u3051\u3067\u3001jwt.decode() \u306f\u5f71\u97ff\u3092\u53d7\u3051\u307e\u305b\u3093\u3002\n\nforsmile.jp/articles/aut...\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3", "creation_timestamp": "2026-09-29T09:54:54.138876Z"} 2026-09-29T09:54:54.138876+00:00 https://vulnerability.circl.lu/sighting/1b26a9cb-efdf-426f-ae2f-e4d15f2104a2/export 2026-09-30T16:57:43.610150+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "1b26a9cb-efdf-426f-ae2f-e4d15f2104a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96760", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mwmq7gsbjq2c", "content": "An Authlib signature bypass vulnerability (CVE-2026-96760, CVE-2026-28802, CVE-2026-27962) lets attackers forge JWS payloads. Update libraries now.\n\n#Authlib #CVE202696760 #Cybersecurity #JWS #Vulnerability", "creation_timestamp": "2026-09-29T02:00:09.937178Z"} 2026-09-29T02:00:09.937178+00:00