TI-2025-40202 CVE-2025-65015 · GHSA-frfh-8v73-gjg4
Resource allocation without limits in authlib joserfc
Priority HIGH 79
joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption (JOSE) standards.
Hsiaoming
Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Hsiaoming records in CISA KEVNo Hsiaoming vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
2 records in Joserfc · all components
TI-2026-22276 CVE-2026-27932 · GHSA-w5r5-m38g-f9f9
joserfc PBES2 p2c Unbounded Iteration Count enables Denial of Service (DoS)
Priority HIGH 72
joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption (JOSE) standards.