joserfc vulnerabilities (Ubuntu)
9 vulnerabilities.
-
joserfcUbuntu joserfc: Compact JWS size guard allocates attacker-controlled segments before rejection 6.9 Medium -
joserfcUbuntu joserfc: Unbounded JWE General JSON `recipients` Array Leads to CPU Exhaustion (DoS) via Repeated RSA Private-Key Decryption 7.5 High -
joserfcUbuntu joserfc: JWS signature verification bypass via empty signatures array in jws.deserialize_json 9.1 Critical -
joserfcUbuntu joserfc claim-validation bypass via array-typed single-string claims (iss/sub/jti) 6.5 Medium -
joserfcUbuntu joserfc accepts JWT with padding, leading to JWT malleability 2.3 Low -
joserfcUbuntu joserfc: HS256/HS384/HS512 verify accepts empty/nil HMAC key (cross-language sibling of CVE-2026-45363) 8.7 High -
joserfcUbuntu joserfc: b64=false RFC7797 JWS payloads bypass JWSRegistry payload-size limits during deserialization 5.3 Medium -
joserfcUbuntu joserfc PBES2 p2c Unbounded Iteration Count enables Denial of Service (DoS) 7.5 High -
joserfcUbuntu joserfc has Possible Uncontrolled Resource Consumption Vulnerability Triggered by Logging Arbitrarily Large JWT Token Payloads 9.2 Critical