JWT Algorithm Confusion in Google Auth Adapter ([GHSA-4q3h-vp4r-prv2](https://github.com/parse-community/parse-server/security/advisories/GHSA-4q3h-vp4r-prv2))
fix: JWT Algorithm Confusion in Google Auth Adapter ([GHSA-4q3h-vp4r-prv2](https://github.com/parse-community/parse-server/security/advisories/GHSA-4q3h-vp4r-prv2)) (#10072)
JWT Algorithm Confusion in Google Auth Adapter ([GHSA-4q3h-vp4r-prv2](https://github.com/parse-community/parse-server/security/advisories/GHSA-4q3h-vp4r-prv2))9d5942-fix-jwt-algorithm-confusion-in-google-auth-cve-2026-27804fixjwt algorithm confusion google auth adapter
Committed by mtrezza
commit message
fix: JWT Algorithm Confusion in Google Auth Adapter ([GHSA-4q3h-vp4r-prv2](https://github.com/parse-community/parse-server/security/advisories/GHSA-4q3h-vp4r-prv2)) (#10072)Editor assessment
This commit patches CVE-2026-27804. The message repeats the JWT algorithm-confusion subject used for the companion PR, differing only in the trailing number, so a reader cannot tell from the header which of the two commits is the original fix and which is the backport. The defect description itself is sharp and technically specific. The markdown advisory link inflates the header well past a reasonable length and scatters reference material into the subject. No body or footer adds explanation. The header is understandable, but the duplication and clutter prevent it from teaching anything on its own.