Lucene search
+L

260 matches found

Vulnrichment
Vulnrichment
•added 2026/09/03 8:46 p.m.•17 views

CVE-2026-84185 Jwcrypto: jwcrypto: general json jws kid binding bypass during jwkset verification

A flaw was found in the jwcrypto library, which is used for implementing Javascript Object Signing and Encryption JOSE standards. The issue occurs when the library verifies a General JSON Serialization JWS using a set of keys. Due to a coding error, the library fails to correctly identify the...

5.9CVSS5.8AI score0.00131EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/03 8:46 p.m.•52 views

CVE-2026-84185

CVE-2026-84185 affects the jwcrypto library, a Python implementation of the JOSE (JSON Object Signing and Encryption) standards. The flaw occurs during verification of a General JSON Serialization JWS against a key set (JWKset): due to a coding error, the library fails to correctly match the key ...

5.9CVSS5.8AI score0.00131EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2026/09/03 8:46 p.m.•13 views

CVE-2026-84185

A flaw was found in the jwcrypto library, which is used for implementing Javascript Object Signing and Encryption JOSE standards. The issue occurs when the library verifies a General JSON Serialization JWS using a set of keys. Due to a coding error, the library fails to correctly identify the...

5.9CVSS5.8AI score0.00131EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/03 12:00 a.m.•1 views

CVE-2026-84185: Improper Verification of Cryptographic Signature

A flaw was found in the jwcrypto library, which is used for implementing Javascript Object Signing and Encryption JOSE standards. The issue occurs when the library verifies a General JSON Serialization JWS using a set of keys. Due to a coding error, the library fails to correctly identify the...

5.9CVSS5.8AI score0.00131EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/03 12:00 a.m.•24 views

PT-2026-85251

A flaw was found in the jwcrypto library, which is used for implementing Javascript Object Signing and Encryption JOSE standards. The issue occurs when the library verifies a General JSON Serialization JWS using a set of keys. Due to a coding error, the library fails to correctly identify the...

5.9CVSS5.8AI score0.00131EPSS
SaveExploits0References10
SUSE CVE
SUSE CVE
•added 2026/08/31 4:22 p.m.•14 views

SUSE CVE-2026-80179

A flaw was found in jwcrypto. A remote attacker can send a specially crafted JSON Web Encryption JWE token containing numerous period delimiters. This malformed token can force the JWE.deserialize function to allocate excessive memory, leading to a MemoryError. This issue results in a denial of...

5.3CVSS5.8AI score0.00407EPSS
SaveExploits0References5
OSV
OSV
•added 2026/08/28 12:18 a.m.•12 views

DEBIAN-CVE-2026-80179

A flaw was found in jwcrypto. A remote attacker can send a specially crafted JSON Web Encryption JWE token containing numerous period delimiters. This malformed token can force the JWE.deserialize function to allocate excessive memory, leading to a MemoryError. This issue results in a denial of...

5.9CVSS5.8AI score0.00407EPSS
SaveExploits0References1
OSV
OSV
•added 2026/08/28 12:18 a.m.•13 views

AZL-98337 CVE-2026-80179 affecting package python-jwcrypto 0.6.0-9

A flaw was found in jwcrypto. A remote attacker can send a specially crafted JSON Web Encryption JWE token containing numerous period delimiters. This malformed token can force the JWE.deserialize function to allocate excessive memory, leading to a MemoryError. This issue results in a denial of...

5.9CVSS5.8AI score0.00407EPSS
SaveExploits0References1
NVD
NVD
•added 2026/08/28 12:18 a.m.•22 views

CVE-2026-80179

A flaw was found in jwcrypto. A remote attacker can send a specially crafted JSON Web Encryption JWE token containing numerous period delimiters. This malformed token can force the JWE.deserialize function to allocate excessive memory, leading to a MemoryError. This issue results in a denial of...

5.9CVSS0.00407EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2026/08/28 12:18 a.m.•16 views

CVE-2026-80179

A flaw was found in jwcrypto. A remote attacker can send a specially crafted JSON Web Encryption JWE token containing numerous period delimiters. This malformed token can force the JWE.deserialize function to allocate excessive memory, leading to a MemoryError. This issue results in a denial of...

5.9CVSS5.8AI score0.00407EPSS
SaveExploits0References4
OSV
OSV
•added 2026/08/28 12:18 a.m.•10 views

UBUNTU-CVE-2026-80179

A flaw was found in jwcrypto. A remote attacker can send a specially crafted JSON Web Encryption JWE token containing numerous period delimiters. This malformed token can force the JWE.deserialize function to allocate excessive memory, leading to a MemoryError. This issue results in a denial of...

5.9CVSS5.8AI score0.00407EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/28 12:00 a.m.•2 views

CVE-2026-80179: Allocation of Resources Without Limits or Throttling

A flaw was found in jwcrypto. A remote attacker can send a specially crafted JSON Web Encryption JWE token containing numerous period delimiters. This malformed token can force the JWE.deserialize function to allocate excessive memory, leading to a MemoryError. This issue results in a denial of...

5.9CVSS5.8AI score0.00407EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/08/28 12:00 a.m.•15 views

Linux Distros Unpatched Vulnerability : CVE-2026-80179

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in jwcrypto. A remote attacker can send a specially crafted JSON Web Encryption JWE token containing numerous period delimiters. This malformed...

5.9CVSS5.8AI score0.00407EPSS
SaveExploits0References4
CVE
CVE
•added 2026/08/27 9:14 p.m.•50 views

CVE-2026-80179

CVE-2026-80179 is a denial of service vulnerability in the jwcrypto Python library. A remote attacker can craft a malformed JSON Web Encryption (JWE) token containing numerous period delimiters that forces the JWE.deserialize() function to allocate excessive memory, triggering a MemoryError . Ser...

5.9CVSS5.8AI score0.00407EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2026/08/27 9:14 p.m.•16 views

CVE-2026-80179

A flaw was found in jwcrypto. A remote attacker can send a specially crafted JSON Web Encryption JWE token containing numerous period delimiters. This malformed token can force the JWE.deserialize function to allocate excessive memory, leading to a MemoryError. This issue results in a denial of...

5.9CVSS5.8AI score0.00407EPSS
SaveExploits0
Cvelist
Cvelist
•added 2026/08/27 9:14 p.m.•52 views

CVE-2026-80179 Jwcrypto: jwcrypto: denial of service via malformed jwe tokens

A flaw was found in jwcrypto. A remote attacker can send a specially crafted JSON Web Encryption JWE token containing numerous period delimiters. This malformed token can force the JWE.deserialize function to allocate excessive memory, leading to a MemoryError. This issue results in a denial of...

5.9CVSS0.00407EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/08/27 9:14 p.m.•14 views

CVE-2026-80179 Jwcrypto: jwcrypto: denial of service via malformed jwe tokens

A flaw was found in jwcrypto. A remote attacker can send a specially crafted JSON Web Encryption JWE token containing numerous period delimiters. This malformed token can force the JWE.deserialize function to allocate excessive memory, leading to a MemoryError. This issue results in a denial of...

5.9CVSS5.8AI score0.00407EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/08/27 9:14 p.m.•12 views

EUVD-2026-67278

A flaw was found in jwcrypto. A remote attacker can send a specially crafted JSON Web Encryption JWE token containing numerous period delimiters. This malformed token can force the JWE.deserialize function to allocate excessive memory, leading to a MemoryError. This issue results in a denial of...

5.9CVSS5.8AI score0.00407EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/08/27 9:08 p.m.•13 views

CVE-2026-80179

A flaw was found in jwcrypto. A remote attacker can send a specially crafted JSON Web Encryption JWE token containing numerous period delimiters. This malformed token can force the JWE.deserialize function to allocate excessive memory, leading to a MemoryError. This issue results in a denial of...

5.9CVSS5.8AI score0.00407EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/08/27 12:00 a.m.•22 views

PT-2026-82800

Name of the Vulnerable Software and Affected Versions jwcrypto affected versions not specified Description A flaw allows a remote attacker to cause a denial of service DoS by sending a specially crafted JSON Web Encryption JWE token containing numerous period delimiters. This malformed token forc...

5.9CVSS5.8AI score0.00407EPSS
SaveExploits0References17
Rows per page
Query Builder