Python-Jose Project / Python-Jose

4 CVEs

CVE ID	Description	Severity	CVSS	Published
CVE-2024-29370	python-jose: python-jose: Denial-of-Service via malicious JSON Web Encryption (JWE) token decompression	HIGH	7.5	Dec 17, 2025
CVE-2024-33664	python-jose: allows attackers to cause a denial of service	MEDIUM	5.3	Apr 25, 2024
CVE-2024-33663	python-jose: algorithm confusion with OpenSSH ECDSA keys and other key formats	CRITICAL	9.3	Apr 25, 2024
CVE-2016-7036	python-jose before 1.3.2 allows attackers to have unspecified impact by leveraging failure to use a constant time comparison for HMAC keys.	CRITICAL	9.8	Jan 23, 2017

Rows per page

Showing 1 to 4 of 4 CVEs