USN-8557-1: Authlib vulnerabilities | Ubuntu security notices
Jay Neiva and Mauro Carrillo discovered that Authlib did not properlyvalidate cryptographic keys embedded in JWT headers. An attacker couldpossibly use this issue to forge trusted tokens, resulting inauthentication and authorization bypass. (CVE-2026-27962) Jay Neiva and Mauro Carrillo discovered that Authlib incorrectly handledRSA1_5 encrypted tokens. An attacker could possibly use this issue torecover sensitive encrypted…