Lucene search
GitHub Advisory DatabaseGHSA-CJWG-QFPM-7377HistoryApr 26, 2024 - 12:30 a.m.
python-jose denial of service via compressed JWE content
2024-04-2600:30:35
CWE-400
GitHub Advisory Database
github.com
18
python-jose
denial of service
json web encryption
jwe
jwt bomb
cve-2024-21319
software
python-jose through 3.3.0 allows attackers to cause a denial of service (resource consumption) during a decode via a crafted JSON Web Encryption (JWE) token with a high compression ratio, aka a “JWT bomb.” This is similar to CVE-2024-21319.
| CPE | Name | Operator | Version |
|---|---|---|---|
| python-jose | le | 3.3.0 |
Related
ubuntucve
ubuntucve
CVE-2024-33664
2024-04-26 00:00:00
CVE-2024-21319
2024-01-09 00:00:00
redhatcve
redhatcve
CVE-2024-33664
2024-04-26 06:04:33
CVE-2024-21319
2024-01-10 05:02:11
osv
osv
CVE-2024-33664
2024-04-26 00:15:09
python-jose denial of service via compressed JWE content
2024-04-26 00:30:35
Microsoft Identity Denial of service vulnerability
2024-01-09 18:28:03
cve
cve
CVE-2024-33664
2024-04-26 00:15:09
CVE-2024-21319
2024-01-09 18:59:01
debiancve
debiancve
CVE-2024-33664
2024-04-26 00:15:09
cvelist
cvelist
CVE-2024-33664
2024-04-25 00:00:00
Microsoft Identity Denial of service vulnerability
2024-01-09 18:59:01
veracode
veracode
Denial Of Service (DoS)
2024-04-29 07:50:48
Denial Of Service (DoS)
2024-01-10 10:01:02
prion
prion
Denial of service
2024-01-09 19:15:00
github
github
Microsoft ASP.NET Core project templates vulnerable to denial of service
2024-01-09 19:35:02
JWX vulnerable to a denial of service attack using compressed JWE message
2024-03-08 15:06:53
JWCrypto vulnerable to JWT bomb Attack in `deserialize` function
2024-03-06 20:00:56
mscve
mscve
Microsoft Identity Denial of service vulnerability
2024-01-09 08:00:00
alpinelinux
alpinelinux
CVE-2024-21319
2024-01-09 19:15:12
nessus
nessus
Ubuntu 22.04 LTS / 23.04 / 23.10 : .NET vulnerabilities (USN-6578-1)
2024-01-11 00:00:00
Oracle Linux 8 : .NET / 7.0 (ELSA-2024-0157)
2024-01-18 00:00:00
AlmaLinux 9 : .NET 7.0 (ALSA-2024:0151)
2024-01-12 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-6578-1)
2024-01-12 00:00:00
.NET Core Multiple Vulnerabilities (KB5033741)
2024-01-11 00:00:00
.NET Core Multiple Vulnerabilities (KB5033733)
2024-01-11 00:00:00
kaspersky
kaspersky
KLA62826 Multiple vulnerabilities in Microsoft Azure
2024-01-09 00:00:00
KLA62822 Multiple vulnerabilities in Microsoft Developer Tools
2024-01-09 00:00:00
ubuntu
ubuntu
.NET vulnerabilities
2024-01-11 00:00:00
almalinux
almalinux
Important: .NET 7.0 security update
2024-01-10 00:00:00
Important: .NET 6.0 security update
2024-01-10 00:00:00
Important: .NET 6.0 security update
2024-01-10 00:00:00
oraclelinux
oraclelinux
.NET 6.0 security update
2024-01-12 00:00:00
.NET 7.0 security update
2024-01-17 00:00:00
.NET 7.0 security update
2024-01-16 00:00:00
redhat
redhat
(RHSA-2024:0152) Important: .NET 8.0 security update
2024-01-10 15:18:52
(RHSA-2024:0150) Important: .NET 8.0 security update
2024-01-10 15:15:53
rocky
rocky
.NET 6.0 security update
2024-01-12 19:57:42
.NET 8.0 security update
2024-01-12 19:57:42
.NET 7.0 security update
2024-01-12 19:57:42
mskb
mskb
.NET 8.0 Update - January 09, 2024 (KB5033741)
2024-01-09 08:00:00
.NET 6.0 Update - January 09, 2024 (KB5033733)
2024-01-09 08:00:00
.NET 7.0 Update - January 09, 2024 (KB5033734)
2024-01-09 08:00:00
rapid7blog
rapid7blog
Patch Tuesday - January 2024
2024-01-09 21:23:10