Python-jose Project

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Python-jose Project records in CISA KEV

No Python-jose Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Python-jose 4 records MEDIUM

Records

4 records

TI-2024-22248 CVE-2024-33664 · GHSA-cjwg-qfpm-7377

python-jose through 3.3.0 allows attackers to cause a denial of service (resource…

MEDIUM 63

python-jose through 3.3.0 allows attackers to cause a denial of service (resource consumption) during a decode via a crafted JSON Web Encryption (JWE) token with a high compression ratio, aka a "JWT bomb." This is simila…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00777 Published 2024-04-25 Fixed in 3.4.0 CWE-400

TI-2024-19433 CVE-2024-29370

In python-jose 3.3.0 (specifically jwe.decrypt), a vulnerability allows an attacker to…

MEDIUM 63

In python-jose 3.3.0 (specifically jwe.decrypt), a vulnerability allows an attacker to cause a Denial-of-Service (DoS) condition by crafting a malicious JSON Web Encryption (JWE) token with an exceptionally high compress…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00185 Published 2025-12-17 No fix listed CWE-409

TI-2024-22247 CVE-2024-33663 · GHSA-6c5p-j8vq-pqhj

python-jose through 3.3.0 has algorithm confusion with OpenSSH ECDSA keys and other key…

MEDIUM 62

python-jose through 3.3.0 has algorithm confusion with OpenSSH ECDSA keys and other key formats.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00307 Published 2024-04-25 Fixed in 3.4.0 CWE-327

TI-2016-06047 CVE-2016-7036 · GHSA-w799-prg3-cx77

python-jose before 1.3.2 allows attackers to have unspecified impact by leveraging…

MEDIUM 46

python-jose before 1.3.2 allows attackers to have unspecified impact by leveraging failure to use a constant time comparison for HMAC keys.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02153 Published 2017-01-23 Fixed in 1.3.2 CWE-361

Open these records in search →

Critical	1
High	0
Medium	3
Low	0
No CVSS	0