CVE-2026-49998Published
Centrifugo is an open-source scalable real-time messaging server. Prior to 6.8.1, Centrifugo dynamic JWKS endpoint verification could reuse a key for one allowed issuer to verify a JWT for another allowed issuer because the JWKS cache and s…
Exact source revision recorded 25 Oct 2026 12:17:38 UTC. It does not establish the source's current position. Latest evidence.
nvd · CVE-2026-49998
PublishedNo affected-package array is stated in this source revision. Check its state and earlier observations; this does not establish that every package is unaffected.