python-joserfc vulnerabilities (openSUSE)
5 vulnerabilities.
-
python-joserfcopenSUSE joserfc: JWS signature verification bypass via empty signatures array in jws.deserialize_json 9.1 Critical -
python-joserfcopenSUSE joserfc accepts JWT with padding, leading to JWT malleability 2.3 Low -
python-joserfcopenSUSE joserfc: HS256/HS384/HS512 verify accepts empty/nil HMAC key (cross-language sibling of CVE-2026-45363) 8.7 High -
python-joserfcopenSUSE joserfc: b64=false RFC7797 JWS payloads bypass JWSRegistry payload-size limits during deserialization 5.3 Medium -
python-joserfcopenSUSE joserfc PBES2 p2c Unbounded Iteration Count enables Denial of Service (DoS) 7.5 High