The vulnerability of the JOSE library Authlib implementation for OAuth and OpenID Connect servers lies in the exposure of information due to inconsistencies, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the JOSE library Authlib implementation for OAuth and OpenID Connect servers is related to the disclosure of information due to incompatibility. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...

JWCrypto 安全漏洞

JWCrypto is an open-source implementation of a JavaScript Object Signature and Encryption JOSE web standard. Versions of JWCrypto prior to 1.5.7 contained security vulnerabilities, which stemmed from insufficient validation of the compressed output size. This could allow unauthenticated attackers...