jwtear

Jwtear A modular command-line tool to parse, create and manipulate JSON Web TokenJWT tokens for security testing purposes. Features Complete modularity. All commands are plugins. Easy to add new plugins. Support JWS and JWE tokens. Easy interface for plugins. follow the template example Flexible...

pyjwt: PyJWT accepts unknown `crit` header extensions (RFC 7515 §4.1.11 MUST violation)

A missing verification step has been discovered in PyJWT. PyJWT does not validate the crit Critical Header Parameter defined in RFC 7515 §4.1.11. When a JWS token contains a crit array listing extensions that PyJWT does not understand, the library accepts the token instead of rejecting it. This...

pyjwt: PyJWT accepts unknown `crit` header extensions (RFC 7515 §4.1.11 MUST violation)

A missing verification step has been discovered in PyJWT. PyJWT does not validate the crit Critical Header Parameter defined in RFC 7515 §4.1.11. When a JWS token contains a crit array listing extensions that PyJWT does not understand, the library accepts the token instead of rejecting it. This...

pyjwt: PyJWT accepts unknown `crit` header extensions (RFC 7515 §4.1.11 MUST violation)

A missing verification step has been discovered in PyJWT. PyJWT does not validate the crit Critical Header Parameter defined in RFC 7515 §4.1.11. When a JWS token contains a crit array listing extensions that PyJWT does not understand, the library accepts the token instead of rejecting it. This...

CVE-2018-0114-Exploit

CVE-2018-0114-Exploit A vulnerability in the Cisco node-jose open source library before 0.11.0 could allow an unauthenticated, remote attacker to re-sign tokens using a key that is embedded within the token. The vulnerability is due to node-jose following the JSON Web Signature JWS standard for...

cve-2022-39227-jwt-auth-bypass-demo

CVE-2022-39227 JWT Authentication Bypass Demo Project Goal This project demonstrates the CVE-2022-39227 vulnerability in a controlled local lab environment. This vulnerability affects the python-jwt library versions 3.3.4 and allows an attacker to forge JWT claims without knowing the secret key b...

POC-CVE-2018-0114

POC-CVE-2018-0114 This repository contains the POC of an exploit for node-jose Stating from the last merge python lib: base64,urllib,rsa,sys Running the tests To run the script just run the following command: python jwk-node-jose.py "payload" key-size key-size whitout Authors Andrea Cappa -...

SUSE CVE-2026-119284

joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption JOSE standards. Prior to 1.7.6, joserfc compact JWS deserialization calls bytes.split before enforcing the existing aggregate segment-size limits. When attacker-controlled compact serializati...

POC-CVE-2018-0114

CVE-2018-0114 POC A vulnerability in the Cisco node-jose open source library before 0.11.0 could allow an unauthenticated, remote attacker to re-sign tokens using a key that is embedded within the token. The vulnerability is due to node-jose following the JSON Web Signature JWS standard for JSON...

CVE-2025-65945-poc

CVE-2025-65945: node-jws Signature Bypass This is a proof of concept for a signature verification bypass in the node-jws library. The bug lets attackers forge valid JWTs when the server derives HMAC secrets from user-controlled data. What's the bug? The jws.createVerify function doesn't validate...

joserfc: Compact JWS size guard allocates attacker-controlled segments before rejection

Summary joserfc 1.7.4 defines compact-JWS header, payload, and signature limits, but calls value.splitb"." before validating them. Python bytes.split copies the attacker-controlled segments, so the current guard allocates roughly one complete payload before rejecting it. Reproduction bash...

GHSA-9PG5-8C7X-5HFX joserfc: Compact JWS size guard allocates attacker-controlled segments before rejection

Summary joserfc 1.7.4 defines compact-JWS header, payload, and signature limits, but calls value.splitb"." before validating them. Python bytes.split copies the attacker-controlled segments, so the current guard allocates roughly one complete payload before rejecting it. Reproduction bash...

EUVD-2026-113401

joserfc: Compact JWS size guard allocates attacker-controlled segments before rejection...

CVE-2026-119284

A flaw was found in joserfc. A remote attacker can trigger a Denial of Service DoS by submitting specially crafted compact JSON Web Signature JWS tokens that exhaust process memory. The library parses and splits input bytes into individual segments before enforcing aggregate size limits, causing...

Linux Distros Unpatched Vulnerability : CVE-2026-119284

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption JOSE standards. Prior to 1.7.6, joserfc compact JWS...

DEBIAN-CVE-2026-119284

joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption JOSE standards. Prior to 1.7.6, joserfc compact JWS deserialization calls bytes.split before enforcing the existing aggregate segment-size limits. When attacker-controlled compact serializati...

CVE-2026-119284

joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption JOSE standards. Prior to 1.7.6, joserfc compact JWS deserialization calls bytes.split before enforcing the existing aggregate segment-size limits. When attacker-controlled compact serializati...

CVE-2026-119284

joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption JOSE standards. Prior to 1.7.6, joserfc compact JWS deserialization calls bytes.split before enforcing the existing aggregate segment-size limits. When attacker-controlled compact serializati...

UBUNTU-CVE-2026-119284

joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption JOSE standards. Prior to 1.7.6, joserfc compact JWS deserialization calls bytes.split before enforcing the existing aggregate segment-size limits. When attacker-controlled compact serializati...

CVE-2026-119284 joserfc: Compact JWS size guard allocates attacker-controlled segments before rejection

joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption JOSE standards. Prior to 1.7.6, joserfc compact JWS deserialization calls bytes.split before enforcing the existing aggregate segment-size limits. When attacker-controlled compact serializati...