PT-2026-132841

Name of the Vulnerable Software and Affected Versions joserfc versions prior to 1.7.5 Description The decrypt json function in the joserfc.jwe module processes a JWE General JSON Serialization recipients array without a count limit, calling decrypt cek for every entry. An unauthenticated attacker...