python-jose
PyPI · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| python-jose algorithm confusion guard bypassed by DER-encoded public keys | python-joseRed Hat OpenShift AI (RHOAI)/rhoai/odh-llama-stack-core-rhel9 | PyPIRed Hat | Critical | No fix reported | |
| PYSEC-2025-185 | python-joseRed Hat Ansible Automation Platform 2/ansible-automation-platform-25/lightspeed-chatbot-rhel8 | PyPIRed Hat | Medium | No fix reported | |
| python-jose denial of service via compressed JWE content | python-jose | PyPI | Medium | Fix reported | |
| python-jose failure to use a constant time comparison for HMAC keys | python-jose | PyPI | Critical | Fix reported | |
| python-jose algorithm confusion with OpenSSH ECDSA keys | python-jose | PyPI | Critical | Fix reported |