점검 대응긴급KEV 미등록
CVE-2026-53776
PerryTS perry 취약점
Perry before 0.5.1166 contains a JWT validation vulnerability that allows remote attackers to bypass token expiration by exploiting the unconditional setting of validate_exp = false in the verify_decode helper within the stdlib JWT verification path. Attackers in possession of a previously issued bearer token can present expired tokens to any jwt.verify() call and retain authenticated access indefinitely, bypassing force-expired sessions such as user logout or administrative revocation.
- 대응 우선순위
- 점검
- CVSS
- 9.3
- EPSS
- 0.36% 백분위 28.4% · 2026.07.29 기준
- CISA KEV
- 미등록
- 조치 기한
- -
- 공개일
- 2026.06.17