jwcrypto vulnerabilities (PyPI)

5 vulnerabilities.

• jwcrypto PyPI JWCrypto: JWE ZIP decompression bomb CVE-2026-39373 Fix available 5.3 MediumApril 7, 2026
• jwcrypto PyPI JWCrypto vulnerable to JWT bomb Attack in `deserialize` function CVE-2024-28102 Fix available 6.8 MediumMarch 6, 2024
• jwcrypto PyPI Jwcrypto: denail of service via specifically crafted jwe CVE-2023-6681 Fix available 5.3 MediumDecember 28, 2023
• jwcrypto PyPI jwcrypto token substitution can lead to authentication bypass CVE-2022-3102 Fix available 6.8 MediumSeptember 21, 2022
• jwcrypto PyPI jwcrypto lacks the Random Filling protection mechanism CVE-2016-6298 Fix available 5.3 MediumSeptember 1, 2016