Количество 8
Количество 8
CVE-2024-33664
python-jose through 3.3.0 allows attackers to cause a denial of service (resource consumption) during a decode via a crafted JSON Web Encryption (JWE) token with a high compression ratio, aka a "JWT bomb." This is similar to CVE-2024-21319.
CVE-2024-33664
python-jose through 3.3.0 allows attackers to cause a denial of service (resource consumption) during a decode via a crafted JSON Web Encryption (JWE) token with a high compression ratio, aka a "JWT bomb." This is similar to CVE-2024-21319.
CVE-2024-33664
python-jose through 3.3.0 allows attackers to cause a denial of service (resource consumption) during a decode via a crafted JSON Web Encryption (JWE) token with a high compression ratio, aka a "JWT bomb." This is similar to CVE-2024-21319.
CVE-2024-33664
python-jose through 3.3.0 allows attackers to cause a denial of servic ...
openSUSE-SU-2024:0149-1
Security update for python-python-jose
GHSA-cjwg-qfpm-7377
python-jose denial of service via compressed JWE content
BDU:2024-04682
Уязвимость компонента JWE Token Handler технологии подписи и шифрования объектов JavaScript на Python, связана с неконтролируемым расходом ресурсов, позволяющая нарушителю вызывать отказ в обслуживании
ROS-20240619-01
Множественные уязвимости python3-jose
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2024-33664 python-jose through 3.3.0 allows attackers to cause a denial of service (resource consumption) during a decode via a crafted JSON Web Encryption (JWE) token with a high compression ratio, aka a "JWT bomb." This is similar to CVE-2024-21319. | CVSS3: 5.3 | 0% Низкий | около 1 года назад |
 | CVE-2024-33664 python-jose through 3.3.0 allows attackers to cause a denial of service (resource consumption) during a decode via a crafted JSON Web Encryption (JWE) token with a high compression ratio, aka a "JWT bomb." This is similar to CVE-2024-21319. | 0% Низкий | около 1 года назад | |
 | CVE-2024-33664 python-jose through 3.3.0 allows attackers to cause a denial of service (resource consumption) during a decode via a crafted JSON Web Encryption (JWE) token with a high compression ratio, aka a "JWT bomb." This is similar to CVE-2024-21319. | CVSS3: 5.3 | 0% Низкий | около 1 года назад |
| CVE-2024-33664 python-jose through 3.3.0 allows attackers to cause a denial of servic ... | CVSS3: 5.3 | 0% Низкий | около 1 года назад |
 | openSUSE-SU-2024:0149-1 Security update for python-python-jose | 0% Низкий | около 1 года назад | |
| GHSA-cjwg-qfpm-7377 python-jose denial of service via compressed JWE content | CVSS3: 5.3 | 0% Низкий | около 1 года назад |
 | BDU:2024-04682 Уязвимость компонента JWE Token Handler технологии подписи и шифрования объектов JavaScript на Python, связана с неконтролируемым расходом ресурсов, позволяющая нарушителю вызывать отказ в обслуживании | CVSS3: 6.8 | 0% Низкий | около 1 года назад |
 | ROS-20240619-01 Множественные уязвимости python3-jose | CVSS3: 7.5 | около 1 года назад |
Уязвимостей на страницу