Do Son A critical 10.0 CVSS flaw (CVE-2026-29000) in the pac4j-jwt library allows attackers to forge JWTs and bypass authentication. Patch immediately.
JSON Web Tokens
CVE-2023-48238 and assigned a CVSS score of 7.5, has the potential to enable malicious actors to launch JWT algorithm confusion attack