Most recent entries from all

Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 01:43:51 +0000 bdu:2024-04682 https://cve.radiocsirt.org/vuln/bdu:2024-04682 bdu:2024-04682 https://cve.radiocsirt.org/vuln/bdu:2024-04682 BREW-glances-CVE-2024-33664 — python-jose denial of service via compressed JWE content https://cve.radiocsirt.org/vuln/brew-glances-cve-2024-33664 <p><strong>Affected:</strong> Homebrew: glances</p> <p>python-jose through 3.3.0 allows attackers to cause a denial of service (resource consumption) during a decode via a crafted JSON Web Encryption (JWE) token with a high compression ratio, aka a "JWT bomb." This is similar to CVE-2024-21319.</p> <p><strong>Affected:</strong> Homebrew: glances</p> <p>python-jose through 3.3.0 allows attackers to cause a denial of service (resource consumption) during a decode via a crafted JSON Web Encryption (JWE) token with a high compression ratio, aka a "JWT bomb." This is similar to CVE-2024-21319.</p> https://cve.radiocsirt.org/vuln/brew-glances-cve-2024-33664 EUVD-2026-161614 https://cve.radiocsirt.org/vuln/euvd-2026-161614 EUVD-2026-161614 https://cve.radiocsirt.org/vuln/euvd-2026-161614 fkie_cve-2024-33664 https://cve.radiocsirt.org/vuln/fkie_cve-2024-33664 <p>python-jose through 3.3.0 allows attackers to cause a denial of service (resource consumption) during a decode via a crafted JSON Web Encryption (JWE) token with a high compression ratio, aka a "JWT bomb." This is similar to CVE-2024-21319.</p> <p>python-jose through 3.3.0 allows attackers to cause a denial of service (resource consumption) during a decode via a crafted JSON Web Encryption (JWE) token with a high compression ratio, aka a "JWT bomb." This is similar to CVE-2024-21319.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-33664 GHSA-cjwg-qfpm-7377 — python-jose denial of service via compressed JWE content https://cve.radiocsirt.org/vuln/ghsa-cjwg-qfpm-7377 <p><strong>Affected:</strong> PyPI: python-jose</p> <p>python-jose through 3.3.0 allows attackers to cause a denial of service (resource consumption) during a decode via a crafted JSON Web Encryption (JWE) token with a high compression ratio, aka a "JWT bomb." This is similar to CVE-2024-21319.</p> <p><strong>Affected:</strong> PyPI: python-jose</p> <p>python-jose through 3.3.0 allows attackers to cause a denial of service (resource consumption) during a decode via a crafted JSON Web Encryption (JWE) token with a high compression ratio, aka a "JWT bomb." This is similar to CVE-2024-21319.</p> https://cve.radiocsirt.org/vuln/ghsa-cjwg-qfpm-7377 gsd-2024-33664 https://cve.radiocsirt.org/vuln/gsd-2024-33664 gsd-2024-33664 https://cve.radiocsirt.org/vuln/gsd-2024-33664 openSUSE-SU-2024:0149-1 — Security update for python-python-jose https://cve.radiocsirt.org/vuln/opensuse-su-2024:0149-1 <p>Security update for python-python-jose</p> <p>Security update for python-python-jose</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:0149-1 PYSEC-2024-233 https://cve.radiocsirt.org/vuln/pysec-2024-233 <p><strong>Affected:</strong> PyPI: python-jose</p> <p>python-jose through 3.3.0 allows attackers to cause a denial of service (resource consumption) during a decode via a crafted JSON Web Encryption (JWE) token with a high compression ratio, aka a "JWT bomb." This is similar to CVE-2024-21319.</p> <p><strong>Affected:</strong> PyPI: python-jose</p> <p>python-jose through 3.3.0 allows attackers to cause a denial of service (resource consumption) during a decode via a crafted JSON Web Encryption (JWE) token with a high compression ratio, aka a "JWT bomb." This is similar to CVE-2024-21319.</p> https://cve.radiocsirt.org/vuln/pysec-2024-233 UBUNTU-CVE-2024-33664 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-33664 <p><strong>Affected:</strong> Ubuntu:22.04:LTS: python-jose, Ubuntu:24.04:LTS: python-jose</p> <p>python-jose through 3.3.0 allows attackers to cause a denial of service (resource consumption) during a decode via a crafted JSON Web Encryption (JWE) token with a high compression ratio, aka a "JWT bomb." This is similar to CVE-2024-21319.</p> <p><strong>Affected:</strong> Ubuntu:22.04:LTS: python-jose, Ubuntu:24.04:LTS: python-jose</p> <p>python-jose through 3.3.0 allows attackers to cause a denial of service (resource consumption) during a decode via a crafted JSON Web Encryption (JWE) token with a high compression ratio, aka a "JWT bomb." This is similar to CVE-2024-21319.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-33664