EUVD-2026-113392

joserfc: Unbounded JWE General JSON recipients Array Leads to CPU Exhaustion DoS via Repeated RSA Private-Key Decryption...

DEBIAN-CVE-2026-119283

joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption JOSE standards. Prior to 1.7.5, joserfc.jwe.decryptjson accepts a JWE General JSON Serialization recipients array without a count limit and calls decryptcek for every entry. An unauthenticate...

CVE-2026-119283

joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption JOSE standards. Prior to 1.7.5, joserfc.jwe.decryptjson accepts a JWE General JSON Serialization recipients array without a count limit and calls decryptcek for every entry. An unauthenticate...

CVE-2026-119283

The joserfc Python library, prior to version 1.7.5 , is vulnerable to a CPU exhaustion Denial of Service (DoS) attack. The issue resides in the joserfc.jwe.decrypt_json() function, which processes a JWE General JSON Serialization recipients array without enforcing a count limit. An unauthenticate...

CVE-2026-119283

joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption JOSE standards. Prior to 1.7.5, joserfc.jwe.decryptjson accepts a JWE General JSON Serialization recipients array without a count limit and calls decryptcek for every entry. An unauthenticate...

CVE-2026-119283: authlib joserfc: joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption (JOSE)…

joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption JOSE standards. Prior to 1.7.5, joserfc.jwe.decryptjson accepts a JWE General JSON Serialization recipients array without a count limit and calls decryptcek for every entry. An unauthenticate...