https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T03:45:48.213946+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-365855 EUVD-2026-365855 2026-10-04T03:45:48.219805+00:00 EUVD-2026-365855 https://cve.radiocsirt.org/vuln/fkie_cve-2026-80179 fkie_cve-2026-80179 2026-10-04T03:45:48.219845+00:00

A flaw was found in jwcrypto. A remote attacker can send a specially crafted JSON Web Encryption (JWE) token containing numerous period delimiters. This malformed token can force the JWE.deserialize() function to allocate excessive memory, leading to a MemoryError. This issue results in a denial of service (DoS) for services that process untrusted JWE values.

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11712-1 openSUSE-SU-2026:11712-1 — python313-jwcrypto-1.6.0-1.1 on GA media 2026-10-04T03:45:48.219879+00:00

python313-jwcrypto-1.6.0-1.1 on GA media

 https://cve.radiocsirt.org/vuln/suse-su-2026:23702-1 SUSE-SU-2026:23702-1 — Security update for python-jwcrypto 2026-10-04T03:45:48.219901+00:00

Security update for python-jwcrypto

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-80179 UBUNTU-CVE-2026-80179 2026-10-04T03:45:48.219916+00:00

Affected: Ubuntu:16.04:LTS: python-jwcrypto, Ubuntu:18.04:LTS: python-jwcrypto, Ubuntu:20.04:LTS: python-jwcrypto, Ubuntu:22.04:LTS: python-jwcrypto, Ubuntu:24.04:LTS: python-jwcrypto, Ubuntu:26.04:LTS: python-jwcrypto

A flaw was found in jwcrypto. A remote attacker can send a specially crafted JSON Web Encryption (JWE) token containing numerous period delimiters. This malformed token can force the JWE.deserialize() function to allocate excessive memory, leading to a MemoryError. This issue results in a denial of service (DoS) for services that process untrusted JWE values.