https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T01:50:01.161233+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-04682 bdu:2024-04682 2026-10-03T01:50:01.337378+00:00 bdu:2024-04682 https://cve.radiocsirt.org/vuln/brew-glances-cve-2024-33664 BREW-glances-CVE-2024-33664 — python-jose denial of service via compressed JWE content 2026-10-03T01:50:01.337425+00:00

Affected: Homebrew: glances

python-jose through 3.3.0 allows attackers to cause a denial of service (resource consumption) during a decode via a crafted JSON Web Encryption (JWE) token with a high compression ratio, aka a "JWT bomb." This is similar to CVE-2024-21319.

 https://cve.radiocsirt.org/vuln/euvd-2026-161614 EUVD-2026-161614 2026-10-03T01:50:01.337462+00:00 EUVD-2026-161614 https://cve.radiocsirt.org/vuln/fkie_cve-2024-33664 fkie_cve-2024-33664 2026-10-03T01:50:01.337476+00:00

python-jose through 3.3.0 allows attackers to cause a denial of service (resource consumption) during a decode via a crafted JSON Web Encryption (JWE) token with a high compression ratio, aka a "JWT bomb." This is similar to CVE-2024-21319.

 https://cve.radiocsirt.org/vuln/ghsa-cjwg-qfpm-7377 GHSA-cjwg-qfpm-7377 — python-jose denial of service via compressed JWE content 2026-10-03T01:50:01.337499+00:00

Affected: PyPI: python-jose

python-jose through 3.3.0 allows attackers to cause a denial of service (resource consumption) during a decode via a crafted JSON Web Encryption (JWE) token with a high compression ratio, aka a "JWT bomb." This is similar to CVE-2024-21319.

 https://cve.radiocsirt.org/vuln/gsd-2024-33664 gsd-2024-33664 2026-10-03T01:50:01.337520+00:00 gsd-2024-33664 https://cve.radiocsirt.org/vuln/opensuse-su-2024:0149-1 openSUSE-SU-2024:0149-1 — Security update for python-python-jose 2026-10-03T01:50:01.337531+00:00

Security update for python-python-jose

 https://cve.radiocsirt.org/vuln/pysec-2024-233 PYSEC-2024-233 2026-10-03T01:50:01.337547+00:00

Affected: PyPI: python-jose

python-jose through 3.3.0 allows attackers to cause a denial of service (resource consumption) during a decode via a crafted JSON Web Encryption (JWE) token with a high compression ratio, aka a "JWT bomb." This is similar to CVE-2024-21319.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-33664 UBUNTU-CVE-2024-33664 2026-10-03T01:50:01.337574+00:00

Affected: Ubuntu:22.04:LTS: python-jose, Ubuntu:24.04:LTS: python-jose

python-jose through 3.3.0 allows attackers to cause a denial of service (resource consumption) during a decode via a crafted JSON Web Encryption (JWE) token with a high compression ratio, aka a "JWT bomb." This is similar to CVE-2024-21319.