CVE Browser

Search and filter CVEs by severity, ecosystem, EPSS score, and more.

Page 1

python-jose: python-jose: Denial-of-Service via malicious JSON Web Encryption (JWE) token decompression

python-jose: allows attackers to cause a denial of service

python-jose: algorithm confusion with OpenSSH ECDSA keys and other key formats

python-jose before 1.3.2 allows attackers to have unspecified impact by leveraging failure to use a constant time comparison for HMAC keys.

CVE ID	Description	Severity	CVSS	EPSS	Published
CVE-2024-29370	python-jose: python-jose: Denial-of-Service via malicious JSON Web Encryption (JWE) token decompression	HIGH	7.5	0.19%	Dec 17, 2025
CVE-2024-33664	python-jose: allows attackers to cause a denial of service	MEDIUM	5.3	0.78%	Apr 25, 2024
CVE-2024-33663	python-jose: algorithm confusion with OpenSSH ECDSA keys and other key formats	CRITICAL	9.3	0.31%	Apr 25, 2024
CVE-2016-7036	python-jose before 1.3.2 allows attackers to have unspecified impact by leveraging failure to use a constant time comparison for HMAC keys.	CRITICAL	9.8	2.11%	Jan 23, 2017

Rows per page

Showing 1 to 4 CVEs · page 1