MEDIUM6.8PyPI
PYSEC-2026-1484· CVE-2024-28102, GHSA-j857-7rvv-vj97JWCrypto vulnerable to JWT bomb Attack in `deserialize` function
Modified: 7/7/2026
package
PyPI/jwcrypto
pkg:pypi/jwcrypto
MEDIUM5.3PyPI
PYSEC-2026-70· CVE-2026-39373, GHSA-fjrm-76x2-c4q4Modified: 5/21/2026
—PyPI
PYSEC-2026-827· CVE-2022-3102, GHSA-gwp4-mcv4-w95jjwcrypto token substitution can lead to authentication bypass
Modified: 7/7/2026
MEDIUM5.3PyPI
GHSA-cw2r-4p82-qv79· CVE-2023-6681, PYSEC-2024-104DoS with algorithms that use PBKDF2 due to unbounded PBES2 Count value
Modified: 11/12/2024
MEDIUM5.3PyPI
GHSA-fjrm-76x2-c4q4· CVE-2026-39373, PYSEC-2026-70JWCrypto: JWE ZIP decompression bomb
Modified: 9/10/2026
MEDIUMPyPI
GHSA-gwp4-mcv4-w95j· CVE-2022-3102, PYSEC-2026-827jwcrypto token substitution can lead to authentication bypass
Modified: 7/7/2026
MEDIUM6.8PyPI
GHSA-j857-7rvv-vj97· CVE-2024-28102, PYSEC-2026-1484JWCrypto vulnerable to JWT bomb Attack in `deserialize` function
Modified: 9/10/2026
MEDIUM5.3PyPI
GHSA-wg33-x934-3ghh· CVE-2016-6298, PYSEC-2016-4jwcrypto lacks the Random Filling protection mechanism
Modified: 11/19/2024
—PyPI
PYSEC-2016-4· CVE-2016-6298, GHSA-wg33-x934-3ghhModified: 6/10/2026
MEDIUM5.3PyPI
PYSEC-2024-104· CVE-2023-6681, GHSA-cw2r-4p82-qv79Modified: 6/10/2026