PT-2025-29195

🗓️ 11 Jul 2025 00:00:00Reported by Positive TechnologiesType

ptsecurity

ptsecurity🔗 dbugs.ptsecurity.com

Connect2id Nimbus JOSE + JWT versions before 10.0.2 are vulnerable to denial-of-service attacks.

Reporter	Title	Published	Views	Family All 78
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected by a vulnerability in Connect2id Nimbus JOSE + JWT (CVE-2025-53864)	7 Nov 202514:21	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Datapower Operations Dashboard could allow a remote attacker to cause a denial of service CVE-2025-53864	8 Dec 202515:13	–	ibm
IBM Security Bulletins	Security Bulletin: DevOps Test Performance contains a vulnerability related to use of the Connect2id Nimbus JOSE + JWT library	16 Apr 202614:47	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerability fixes in IBM webMethods Managed File Transfer On-Prem	22 Dec 202513:43	–	ibm
IBM Security Bulletins	Security Bulletin: EDB PGAI Hybrid Management with IBM is affected by Multiple Vulnerabilities.	6 May 202615:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM watsonx Orchestrate Developer Edition affected by vulnerability in nimbus-jose-jwt	30 Oct 202507:13	–	ibm
IBM Security Bulletins	Security Bulletin: Common vulnerabilities addressed in Cloudera Observability 3.6.2	9 Mar 202617:07	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM watsonx Orchestrate Cartridge for IBM Cloud Pak for Data	16 Dec 202511:07	–	ibm
IBM Security Bulletins	Security Bulletin:Multiple Vulnerabilities in IBM Event Endpoint Management	2 Dec 202511:49	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Engineering Lifecycle Management - Jazz Foundation is impacted by vulnerabilities in Nimbus JOSE+JWT	27 Jan 202607:00	–	ibm

Source	Link
bitbucket	www.bitbucket.org/connect2id/nimbus-jose-jwt/issues/593/back-port-cve-2025-53864-fix-to-9x-branch
t	www.t.me/cvenotify/128489
bitbucket	www.bitbucket.org/connect2id/nimbus-jose-jwt
t	www.t.me/cvetracker/27522
bitbucket	www.bitbucket.org/connect2id/nimbus-jose-jwt/issues/583/stackoverflowerror-due-to-deeply-nested
osv	www.osv.dev/vulnerability/UBUNTU-CVE-2025-53864
twitter	www.twitter.com/VulmonFeeds/status/1943517782370402341
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-53864
github	www.github.com/google/gson/commit/1039427ff0100293dd3cf967a53a55282c0fef6b
ubuntu	www.ubuntu.com/security/CVE-2025-53864

02 Oct 2025 00:00Current

7.3High risk

Vulners AI Score7.3

CVSS 3.15.8

EPSS0.00143

SSVC

connect2id nimbus jose jwt denial-of-service json object version update security vulnerability