Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 26/04/2024 Updated: 26/04/2024

python-jose up to and including 3.3.0 allows malicious users to cause a denial of service (resource consumption) during a decode via a crafted JSON Web Encryption (JWE) token with a high compression ratio, aka a "JWT bomb." This is similar to CVE-2024-21319.

Debian Bug report logs - #1070375 python-jose: CVE-2024-33663 CVE-2024-33664 Package: src:python-jose; Maintainer for src:python-jose is Debian Python Team <team+python@trackerdebianorg>; Reported by: Moritz Mühlenhoff <jmm@inutilorg> Date: Sat, 4 May 2024 16:03:01 UTC Severity: important Tags: security, upstrea ...

https://github.com/mpdavis/python-jose/issues/344 https://github.com/mpdavis/python-jose/pull/345 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1070375 https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2024-33664

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect