Read the docs

latchset

Records9All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

latchset records in CISA KEV

No latchset vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Jwcrypto 4 records MEDIUM Jose 1 record HIGH Pkcs11-provider 1 record LOW

Records

4 records in Jwcrypto · all components

TI-2026-28360 CVE-2026-39373 · GHSA-fjrm-76x2-c4q4

JWCrypto: JWE ZIP decompression bomb

Priority MEDIUM 63

JWCrypto implements JWK, JWS, and JWE specifications using python-cryptography.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00306 Published 2026-04-07 Partial fix · 1.5.7 CWE-409
TI-2016-05392 CVE-2016-6298 · GHSA-wg33-x934-3ghh

The _Rsa15 class in the RSA 1.5 algorithm implementation in jwa.py in jwcrypto before…

Priority LOW 28

The _Rsa15 class in the RSA 1.5 algorithm implementation in jwa.py in jwcrypto before 0.3.2 lacks the Random Filling protection mechanism, which makes it easier for remote attackers to obtain cleartext data via a Million…

CVSS 3.1MEDIUM 5.3 Network Low privileges No interaction EPSS 0.02226 Published 2016-09-01 Fixed in 0.3.2 CWE-200
Open these records in search →