Andrew Bennett JOSE Resource Management error vulnerability

Versions 1.7.7 through 1.11.13 of Andrew Bennett’s JOSE library contain a resource management error vulnerability. This flaw arises from inefficient algorithm complexity and insufficient validation of parameters such as d, e, and n within RSA JSON Web Keys. When parsing specially crafted JWKs, th...