[GHSA-993g-76c3-p5m4] PyJWKClient: missing scheme allowlist enables CVE-2024-21643-class SSRF + token forgery via file://, ftp://, data: schemes - #8521

[GHSA-993g-76c3-p5m4] PyJWKClient: missing scheme allowlist enables CVE-2024-21643-class SSRF + token forgery via file://, ftp://, data: schemes#8521

advisory-database[bot] merged 1 commit into

shaked-seal/advisory-improvement-8521github/advisory-database:shaked-seal/advisory-improvement-8521from

shaked-seal-GHSA-993g-76c3-p5m4github/advisory-database:shaked-seal-GHSA-993g-76c3-p5m4Copy head branch name to clipboard