joserfc has Possible Uncontrolled Resource Consumption Vulnerability Triggered by Logging Arbitrarily Large JWT Token Payloads
Modified: 9/10/2026
package
pkg:pypi/joserfc
joserfc has Possible Uncontrolled Resource Consumption Vulnerability Triggered by Logging Arbitrarily Large JWT Token Payloads
Modified: 9/10/2026
joserfc: HS256/HS384/HS512 verify accepts empty/nil HMAC key (cross-language sibling of CVE-2026-45363)
Modified: 9/10/2026
joserfc's PBES2 p2c Unbounded Iteration Count enables Denial of Service (DoS)
Modified: 9/10/2026
joserfc: b64=false RFC7797 JWS payloads bypass JWSRegistry payload-size limits during deserialization
Modified: 9/10/2026
joserfc: HS256/HS384/HS512 verify accepts empty/nil HMAC key (cross-language sibling of CVE-2026-45363)
Modified: 7/13/2026
joserfc's PBES2 p2c Unbounded Iteration Count enables Denial of Service (DoS)
Modified: 7/13/2026
joserfc: b64=false RFC7797 JWS payloads bypass JWSRegistry payload-size limits during deserialization
Modified: 7/13/2026
joserfc has Possible Uncontrolled Resource Consumption Vulnerability Triggered by Logging Arbitrarily Large JWT Token Payloads
Modified: 7/2/2026