Lucene search
+L

3 matches found

BDU FSTEC
BDU FSTEC
•added 2026/10/02 12:00 a.m.•40 views

PyJWT _load() DoS

The vulnerability of the PyJWS.load function in the jwt/apijws.py file of the PyJWT library is related to an uncontrolled recursion. Exploiting this vulnerability could allow a malicious actor to cause service failures...

5.3CVSS6.5AI score0.00343EPSS
SaveExploits1References4Affected Software1
Tenable Nessus
Tenable Nessus
•added 2026/09/30 12:00 a.m.•16 views

Linux Distros Unpatched Vulnerability : CVE-2026-102265

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PyJWT is a Python implementation of JSON Web Token standards. From 2.13.0 until 2.14.0, PyJWS.load in jwt/apijws.py is affected because parser catches ValueErro...

5.3CVSS5.9AI score0.00343EPSS
SaveExploits1References4
osv_azl
osv_azl
•added 2026/09/28 9:17 p.m.•16 views

AZL-105230 CVE-2026-102265 affecting package python-jwt 2.13.0-1

PyJWT is a Python implementation of JSON Web Token standards. From 2.13.0 until 2.14.0, PyJWS.load in jwt/apijws.py is affected because parser catches ValueError but not RecursionError. This occurs when a deeply nested token header reaches json.loads. As a result, RecursionError escapes the...

5.3CVSS5.9AI score0.00343EPSS
SaveExploits1References1
Rows per page
Query Builder