Описание
python-jose through 3.3.0 has algorithm confusion with OpenSSH ECDSA keys and other key formats. This is similar to CVE-2022-29217.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| python-jose | removed | package | ||
| python-jose | ignored | bookworm | package |
Примечания
https://github.com/mpdavis/python-jose/issues/346
EPSS
Процентиль: 71%
0.00684
Низкий
Связанные уязвимости
CVSS3: 6.5
ubuntu
больше 1 года назад
python-jose through 3.3.0 has algorithm confusion with OpenSSH ECDSA keys and other key formats. This is similar to CVE-2022-29217.
redhat
больше 1 года назад
python-jose through 3.3.0 has algorithm confusion with OpenSSH ECDSA keys and other key formats. This is similar to CVE-2022-29217.
CVSS3: 6.5
nvd
больше 1 года назад
python-jose through 3.3.0 has algorithm confusion with OpenSSH ECDSA keys and other key formats. This is similar to CVE-2022-29217.
CVSS3: 7.4
github
больше 1 года назад
python-jose algorithm confusion with OpenSSH ECDSA keys
EPSS
Процентиль: 71%
0.00684
Низкий