EUVD-2026-113401

joserfc: Compact JWS size guard allocates attacker-controlled segments before rejection...

CVE-2026-119284

joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption JOSE standards. Prior to 1.7.6, joserfc compact JWS deserialization calls bytes.split before enforcing the existing aggregate segment-size limits. When attacker-controlled compact serializati...

CVE-2026-119284

joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption JOSE standards. Prior to 1.7.6, joserfc compact JWS deserialization calls bytes.split before enforcing the existing aggregate segment-size limits. When attacker-controlled compact serializati...

CVE-2026-119284: authlib joserfc: joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption (JOSE)…

joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption JOSE standards. Prior to 1.7.6, joserfc compact JWS deserialization calls bytes.split before enforcing the existing aggregate segment-size limits. When attacker-controlled compact serializati...