Описание
python-jose through 3.3.0 has algorithm confusion with OpenSSH ECDSA keys and other key formats. This is similar to CVE-2022-29217.
Пакеты
Пакет | Статус | Версия исправления | Релиз | Тип |
---|---|---|---|---|
python-jose | removed | package | ||
python-jose | ignored | bookworm | package |
Примечания
https://github.com/mpdavis/python-jose/issues/346
EPSS
Процентиль: 23%
0.00074
Низкий
Связанные уязвимости
CVSS3: 6.5
ubuntu
около 1 года назад
python-jose through 3.3.0 has algorithm confusion with OpenSSH ECDSA keys and other key formats. This is similar to CVE-2022-29217.
redhat
около 1 года назад
python-jose through 3.3.0 has algorithm confusion with OpenSSH ECDSA keys and other key formats. This is similar to CVE-2022-29217.
CVSS3: 6.5
nvd
около 1 года назад
python-jose through 3.3.0 has algorithm confusion with OpenSSH ECDSA keys and other key formats. This is similar to CVE-2022-29217.
CVSS3: 7.4
github
около 1 года назад
python-jose algorithm confusion with OpenSSH ECDSA keys
EPSS
Процентиль: 23%
0.00074
Низкий