Mpdavis vulnerabilities
We track 2 vulnerabilities in Mpdavis products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 2, 2026.
2vulnerabilities
1critical
1high
0exploited
8.3average CVSS score
Latest Mpdavis vulnerabilities
- 7.4 High severity
python-jose: Improper Verification of Cryptographic Signature
python-jose through 3.5.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge JWTs because HMACKey and CryptographyHMACKey accept zero-length HMAC secrets. When an application's HS256/HS384/HS512 verification key reso
- 9.1 Critical severity
python-jose: Improper Verification of Cryptographic Signature
python-jose through 3.5.0 fails to properly validate asymmetric keys in HMAC initialization, accepting DER-encoded public keys that lack PEM armor or SSH prefixes. Attackers holding the service's public key can forge HS256 tokens that pass verification when al