Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: latchset Component: Jwcrypto Clear all filters
TI-2026-28360 CVE-2026-39373 · GHSA-fjrm-76x2-c4q4

JWCrypto: JWE ZIP decompression bomb

Priority MEDIUM 63

JWCrypto implements JWK, JWS, and JWE specifications using python-cryptography.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00306 Published 2026-04-07 Partial fix · 1.5.7 CWE-409
TI-2016-05392 CVE-2016-6298 · GHSA-wg33-x934-3ghh

The _Rsa15 class in the RSA 1.5 algorithm implementation in jwa.py in jwcrypto before…

Priority LOW 28

The _Rsa15 class in the RSA 1.5 algorithm implementation in jwa.py in jwcrypto before 0.3.2 lacks the Random Filling protection mechanism, which makes it easier for remote attackers to obtain cleartext data via a Million…

CVSS 3.1MEDIUM 5.3 Network Low privileges No interaction EPSS 0.02226 Published 2016-09-01 Fixed in 0.3.2 CWE-200