CVE-2020-26244

CVE-2020-26244 describes multiple cryptographic vulnerabilities in the Python oic library (python_openid_connect_project python_openid_connect) prior to version 1.2.1. These issues include insufficient validation of IdToken signatures and the 'none' algorithm, and a lack of 'iat' claim sanity checks, potentially leading to unverified tokens being accepted. With a CVSS score of 6.8 (Medium), successful exploitation requires low privileges and high attack complexity but could result in high confidentiality and integrity impacts. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.