Latchset / Jwcrypto

4 CVEs

CVE ID	Description	Severity	CVSS	Published
CVE-2026-39373	JWCrypto: JWE ZIP decompression bomb	HIGH	7.5	Apr 7, 2026
CVE-2024-28102	JWCrypto vulnerable to JWT bomb Attack in `deserialize` function	MEDIUM	6.8	Mar 6, 2024
CVE-2023-6681	Jwcrypto: denail of service via specifically crafted jwe	MEDIUM	5.3	Feb 12, 2024
CVE-2016-6298	The _Rsa15 class in the RSA 1.5 algorithm implementation in jwa.py in jwcrypto before 0.3.2 lacks the Random Filling protection mechanism, which makes it easie…	MEDIUM	6.0	Sep 1, 2016

Rows per page

Showing 1 to 4 of 4 CVEs