jwcrypto
PyPI · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| JWCrypto: JWE ZIP decompression bomb | jwcryptoRed Hat Ansible Automation Platform 2/ansible-automation-platform-24/lightspeed-rhel8 | PyPIRed Hat | Medium | Fix reported | |
| JWCrypto vulnerable to JWT bomb Attack in `deserialize` function | jwcryptoRed Hat Enterprise Linux 7/python-jwcrypto | PyPIRed Hat | Medium | Fix reported | |
| jwcrypto token substitution can lead to authentication bypass | jwcrypto | PyPI | Medium | Fix reported | |
| jwcrypto lacks the Random Filling protection mechanism | jwcrypto | PyPI | Medium | Fix reported | |
| DoS with algorithms that use PBKDF2 due to unbounded PBES2 Count value | jwcryptoRed Hat Enterprise Linux 7/python-jwcrypto | PyPIRed Hat | Medium | Fix reported |