Cybersecurity
CVE-2026-120459: Authentication Bypass in python-jose via Empty HMAC Keys
Discover details about CVE-2026-120459, a critical authentication bypass vulnerability in python-jose through 3.5.0 involving empty HMAC secrets.
CVSS 7.4 HIGHCVE-2026-120459See vendor advisoryNo patch · mitigation
2 min read