joserfc vulnerabilities (PyPI)
6 vulnerabilities.
-
joserfcPyPI joserfc: Compact JWS size guard allocates attacker-controlled segments before rejection 6.9 Medium -
joserfcPyPI joserfc: Unbounded JWE General JSON `recipients` Array Leads to CPU Exhaustion (DoS) via Repeated RSA Private-Key Decryption 7.5 High -
joserfcPyPI joserfc: HS256/HS384/HS512 verify accepts empty/nil HMAC key (cross-language sibling of CVE-2026-45363) 8.7 High -
joserfcPyPI joserfc: b64=false RFC7797 JWS payloads bypass JWSRegistry payload-size limits during deserialization 5.3 Medium -
joserfcPyPI joserfc PBES2 p2c Unbounded Iteration Count enables Denial of Service (DoS) 7.5 High -
joserfcPyPI joserfc has Possible Uncontrolled Resource Consumption Vulnerability Triggered by Logging Arbitrarily Large JWT Token Payloads 9.2 Critical