Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xpf8-484v-j9w6

Опубликовано: 31 июл. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 7

Описание

pyjwt v2.10.1 was discovered to contain weak encryption.

pyjwt v2.10.1 was discovered to contain weak encryption.

EPSS

Процентиль: 2%
0.00015
Низкий

7 High

CVSS3

Дефекты

CWE-311

Связанные уязвимости

CVSS3: 7
ubuntu
3 месяца назад

pyjwt v2.10.1 was discovered to contain weak encryption. NOTE: this is disputed by the Supplier because the key length is chosen by the application that uses the library (admittedly, library users may benefit from a minimum value and a mechanism for opting in to strict enforcement).

CVSS3: 5.6
redhat
3 месяца назад

pyjwt v2.10.1 was discovered to contain weak encryption. NOTE: this is disputed by the Supplier because the key length is chosen by the application that uses the library (admittedly, library users may benefit from a minimum value and a mechanism for opting in to strict enforcement).

CVSS3: 7
nvd
3 месяца назад

pyjwt v2.10.1 was discovered to contain weak encryption. NOTE: this is disputed by the Supplier because the key length is chosen by the application that uses the library (admittedly, library users may benefit from a minimum value and a mechanism for opting in to strict enforcement).

msrc
2 месяца назад

pyjwt v2.10.1 was discovered to contain weak encryption. NOTE: this is disputed by the Supplier because the key length is chosen by the application that uses the library (admittedly, library users may benefit from a minimum value and a mechanism for opting in to strict enforcement).

CVSS3: 7
debian
3 месяца назад

pyjwt v2.10.1 was discovered to contain weak encryption. NOTE: this is ...

EPSS

Процентиль: 2%
0.00015
Низкий

7 High

CVSS3

Дефекты

CWE-311