8 matches found
GHSA-W6J9-CWV2-H6WQ PyJWT: Malformed RSA JWK aborts parsing of an entire JWK Set
Summary A malformed RSA JWK inside a JWK Set aborts parsing of the entire set instead of being skipped, because RSAAlgorithm.fromjwk can raise a plain ValueError that isn't caught by PyJWKSet's per-key error-skipping logic. Affected component / version - Package: PyJWT PyPI, ecosystem pip - Files...
5.9CVSS6.1AI score0.00352EPSS
SaveExploits0References5
20