Published Oct 8, 2026
CVSS
CRITICAL
EPSS
Affected packages
fast-jwt: Incomplete patch of CVE-2026-34950: Non-whitespace key-prefix re-enables RSA→HS256 algorithm confusion