TI-2024-18683 CVE-2024-28102 · GHSA-j857-7rvv-vj97
JWCrypto vulnerable to JWT bomb Attack in `deserialize` function
Priority MEDIUM 63
JWCrypto implements JWK, JWS, and JWE specifications using python-cryptography.
RHSA-2024:3267
idm:DL1 and idm:client security update
Released 2024-05-22 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) bind-dyndb-ldap-11.6-5.module+el8.10.0+21691+df63127d.aarch64::idm:DL1, bind-dyndb-ldap-11.6-5.module+el8.10.0+21691+df63127d.ppc64le::idm:DL1, bind-dyndb-ldap-11.6-5.module+el8.10.0+21691+df63127d.s390x::idm:DL1 +47
Fixes 2 records
TI-2023-06111 CVE-2023-6681 · GHSA-cw2r-4p82-qv79
Jwcrypto: denail of service via specifically crafted jwe
Priority LOW 26
A vulnerability was found in JWCrypto.