agentprime: authlib-joserfcEvery new CVE for authlib-joserfc.https://agentprime.io/CVE-2026-102946: joserfc: JWS signature verification bypass via empty signatures array in jws.deserialize_jsonhttps://agentprime.io/advisories/CVE-2026-102946/https://agentprime.io/advisories/CVE-2026-102946/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 15 Oct 2026 18:28:06 GMTCVEcriticalCVE-2026-75509: joserfc claim-validation bypass via array-typed single-string claims (iss/sub/jti)https://agentprime.io/advisories/CVE-2026-75509/https://agentprime.io/advisories/CVE-2026-75509/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 24 Aug 2026 20:08:07 GMTCVECVE-2026-62995: joserfc accepts JWT with padding, leading to JWT malleabilityhttps://agentprime.io/advisories/CVE-2026-62995/https://agentprime.io/advisories/CVE-2026-62995/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 29 Jul 2026 18:27:06 GMTCVE