168 matches found
python-jose algorithm confusion with OpenSSH ECDSA keys
python-jose through 3.3.0 has algorithm confusion with OpenSSH ECDSA keys and other key formats. This is similar to CVE-2022-29217...
core-devoops (>=0.0.1, <=0.0.2) potentially affected by CVE-2024-33663 +1 more via python-jose (1.4.0)
python-jose PYPI version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on python-jose and may be impacted: - core-devoops =0.0.1, =0.0.2 Source cves: CVE-2024-33663, CVE-2026-85394 Source advisory: OSV:GHSA-6C5P-J8VQ-PQHJ...
core-devoops (>=0.0.1, <=0.0.2) potentially affected by CVE-2024-33664 via python-jose (1.4.0)
python-jose PYPI version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on python-jose and may be impacted: - core-devoops =0.0.1, =0.0.2 Source cves: CVE-2024-33664 Source advisory: OSV:GHSA-CJWG-QFPM-7377...
allennlp (>=0.8.0, <=0.8.2), cloudless (0.0.0) +6 more potentially affected by CVE-2024-33663 +1 more via python-jose (2.0.2)
python-jose PYPI version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on python-jose and may be impacted: - allennlp =0.8.0, =1.0.0, =1.3.4, =0.4.3, =0.0.25, =0.0.26 Source cves: CVE-2024-33663, CVE-2026-85394 Source advisory:...
allennlp (>=0.8.0, <=0.8.2), cloudless (0.0.0) +6 more potentially affected by CVE-2024-33664 via python-jose (2.0.2)
python-jose PYPI version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on python-jose and may be impacted: - allennlp =0.8.0, =1.0.0, =1.3.4, =0.4.3, =0.0.25, =0.0.26 Source cves: CVE-2024-33664 Source advisory: OSV:GHSA-CJWG-QFPM-7377...
aef-gw (>=0.1.1, <=0.1.15), agentmetrics-server (>=0.1.0, <=0.2.0) +161 more potentially affected by CVE-2024-33663 +1 more via python-jose (>=3.0.0, <=3.3.0)
python-jose PYPI version =3.0.0, =0.1.1, =0.1.0, =0.1.2, =0.1.0, =0.9.0, =1.23.0.dev0, =0.1.2, =0.1.18, =1.1.3, =1.5.0, =0.1.7, =0.31.6, =0.3.0, =0.4.0 and more Source cves: CVE-2024-33663, CVE-2026-85394 Source advisory: OSV:GHSA-6C5P-J8VQ-PQHJ...
aef-gw (>=0.1.1, <=0.1.15), agentmetrics-server (>=0.1.0, <=0.2.0) +161 more potentially affected by CVE-2024-33663 via python-jose (>=3.0.0, <=3.3.0)
python-jose PYPI version =3.0.0, =0.1.1, =0.1.0, =0.1.2, =0.1.0, =0.9.0, =1.23.0.dev0, =0.1.2, =0.1.18, =1.1.3, =1.5.0, =0.1.7, =0.31.6, =0.3.0, =0.4.0 and more Source cves: CVE-2024-33663 Source advisory: GHSA-6C5P-J8VQ-PQHJ...
aef-gw (>=0.1.1, <=0.1.15), agentmetrics-server (>=0.1.0, <=0.2.0) +161 more potentially affected by CVE-2024-33664 via python-jose (>=3.0.0, <=3.3.0)
python-jose PYPI version =3.0.0, =0.1.1, =0.1.0, =0.1.2, =0.1.0, =0.9.0, =1.23.0.dev0, =0.1.2, =0.1.18, =1.1.3, =1.5.0, =0.1.7, =0.31.6, =0.3.0, =0.4.0 and more Source cves: CVE-2024-33664 Source advisory: GHSA-CJWG-QFPM-7377...
aef-gw (>=0.1.1, <=0.1.15), agentmetrics-server (>=0.1.0, <=0.2.0) +161 more potentially affected by CVE-2024-33664 via python-jose (>=3.0.0, <=3.3.0)
python-jose PYPI version =3.0.0, =0.1.1, =0.1.0, =0.1.2, =0.1.0, =0.9.0, =1.23.0.dev0, =0.1.2, =0.1.18, =1.1.3, =1.5.0, =0.1.7, =0.31.6, =0.3.0, =0.4.0 and more Source cves: CVE-2024-33664 Source advisory: OSV:GHSA-CJWG-QFPM-7377...
PYSEC-2024-232
python-jose through 3.3.0 has algorithm confusion with OpenSSH ECDSA keys and other key formats. This is similar to CVE-2022-29217...
PYSEC-2024-233
python-jose through 3.3.0 allows attackers to cause a denial of service resource consumption during a decode via a crafted JSON Web Encryption JWE token with a high compression ratio, aka a "JWT bomb." This is similar to CVE-2024-21319...
PYSEC-2024-233
python-jose through 3.3.0 allows attackers to cause a denial of service resource consumption during a decode via a crafted JSON Web Encryption JWE token with a high compression ratio, aka a "JWT bomb." This is similar to CVE-2024-21319...
flask-adfs (>=0.1.9, <=0.1.19), ghoauth (>=0.5.1, <=0.6.1) +1 more potentially affected by CVE-2024-33664 via python-jose (1.3.2)
python-jose PYPI version 1.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on python-jose and may be impacted: - flask-adfs =0.1.9, =0.5.1, =0.3.2, =0.3.3 Source cves: CVE-2024-33664 Source advisory: OSV:PYSEC-2024-233...
flask-adfs (>=0.1.9, <=0.1.19), ghoauth (>=0.5.1, <=0.6.1) +1 more potentially affected by CVE-2024-33663 +1 more via python-jose (1.3.2)
python-jose PYPI version 1.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on python-jose and may be impacted: - flask-adfs =0.1.9, =0.5.1, =0.3.2, =0.3.3 Source cves: CVE-2024-33663, CVE-2026-85394 Source advisory: OSV:PYSEC-2024-232...
datawire-cloudtools (0.2.6) potentially affected by CVE-2024-33664 via python-jose (0.5.5)
python-jose PYPI version 0.5.5 is affected by a known vulnerability. The following packages have a transitive dependency on python-jose and may be impacted: - datawire-cloudtools 0.2.6 Source cves: CVE-2024-33664 Source advisory: OSV:PYSEC-2024-233...
datawire-cloudtools (0.2.6) potentially affected by CVE-2024-33663 +1 more via python-jose (0.5.5)
python-jose PYPI version 0.5.5 is affected by a known vulnerability. The following packages have a transitive dependency on python-jose and may be impacted: - datawire-cloudtools 0.2.6 Source cves: CVE-2024-33663, CVE-2026-85394 Source advisory: OSV:PYSEC-2024-232...
CVE-2024-33664
python-jose through 3.3.0 allows attackers to cause a denial of service resource consumption during a decode via a crafted JSON Web Encryption JWE token with a high compression ratio, aka a "JWT bomb." This is similar to CVE-2024-21319...
CVE-2024-33663
python-jose through 3.3.0 has algorithm confusion with OpenSSH ECDSA keys and other key formats. This is similar to CVE-2022-29217...
DEBIAN-CVE-2024-33664
python-jose through 3.3.0 allows attackers to cause a denial of service resource consumption during a decode via a crafted JSON Web Encryption JWE token with a high compression ratio, aka a "JWT bomb." This is similar to CVE-2024-21319...