POC-CVE-2018-0114

CVE-2018-0114 POC Cisco के node-jose ओपन सोर्स लाइब्रेरी के 0.11.0 से पहले के संस्करण में एक कमज़ोरी थी जो एक अप्रमाणित, दूरस्थ हमलावर को टोकन में एम्बेडेड कुंजी का उपयोग करके टोकन पर फिर से हस्ताक्षर करने की अनुमति दे सकती थी। यह कमज़ोरी node-jose द्वारा JSON वेब टोकन JWT के लिए JSON वेब सिग्नेच...

jwtear

Jwtear Uma ferramenta modular de linha de comando para analisar, criar e manipular tokens JSON Web Token JWT para fins de teste de segurança. Funcionalidades Modularidade completa. Todos os comandos são plugins. Fácil adicionar novos plugins. Suporte a tokens JWS e JWE. Interface fácil para...

CVE-2025-65945-poc

CVE-2025-65945: node-jws हस्ताक्षर बाईपास यह node-jws लाइब्रेरी में हस्ताक्षर सत्यापन बाईपास के लिए एक प्रूफ ऑफ कॉन्सेप्ट है। यह बग हमलावरों को वैध JWT बनाने की अनुमति देता है जब सर्वर उपयोगकर्ता-नियंत्रित डेटा से HMAC रहस्य प्राप्त करता है। बग क्या है? jws.createVerify फ़ंक्शन यह मान्य नहीं करता...

CVE-2018-0114-Exploit

CVE-2018-0114-Exploit Cisco node-jose ओपन सोर्स लाइब्रेरी 0.11.0 से पहले के संस्करण में एक कमजोरी एक अनप्रमाणित, दूरस्थ हमलावर को टोकन के भीतर एम्बेडेड कुंजी का उपयोग करके टोकन को फिर से हस्ताक्षरित करने की अनुमति दे सकती है। यह कमजोरी node-jose द्वारा JSON Web Signature JWS मानक का पालन करने के...

cve-2022-39227-jwt-auth-bypass-demo

CVE-2022-39227 JWT Authentication Bypass Demo Цель проекта Этот проект демонстрирует уязвимость CVE-2022-39227 в контролируемой локальной лабораторной среде. Эта уязвимость затрагивает библиотеку python-jwt версии 3.3.4 и позволяет атакующему подделывать утверждения JWT claims без знания секретно...

POC-CVE-2018-0114

POC-CVE-2018-0114 यह रिपॉज़िटरी node-jose Stating from the last merge root@kitploit: python lib: base64,urllib,rsa,sys...

CVE-2026-70666

Lemur manages TLS certificate creation. Prior to 1.9.3, an authority-role member could update acmeurl through PUT /api/1/authorities/ without revalidation and direct setupacmeclientnoretry to an attacker-controlled ACME server. ACME directory and order responses contain newNonce, newOrder,...

CVE-2026-50634

A flaw was found in Apache CXF. The JwsJsonContainerRequestFilter component can be exploited to process metadata that has not been authenticated by an accepted signature. This bypasses the application's security assumption that Content-Type or protected HTTP-header metadata originates from a...

CLSA-2026-1784943208 TuxCare security update for jws (3 CVEs)

TuxCare rebuilt jws to address 3 CVEs. Fixed in 0.2.6-tuxcare.1...

python-pyjwt: PyJWT: Denial of Service via processing of crafted detached JWS tokens

A flaw was found in PyJWT. A remote attacker can exploit this by supplying an arbitrarily large Base64URL payload segment when verifying detached JSON Web Signature JWS tokens using the unencoded-payload option. This forces excessive CPU work and memory allocations, leading to a Denial of Service...

EUVD-2026-37805

joserfc: b64=false RFC7797 JWS payloads bypass JWSRegistry payload-size limits during deserialization...

GHSA-JC38-X7X8-2XC8 PHP JWT Framework: JWSVerifier uses algorithm from unprotected header, enabling algorithm confusion attacks

Summary JWSVerifier::getAlgorithm in src/Library/Signature/JWSVerifier.php line 144 merges protected and unprotected headers using PHP's spread operator: php $completeHeader = ...$signature-getProtectedHeader, ...$signature-getHeader; In PHP, when spreading arrays with duplicate string keys, the...

CVE-2026-48990

joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption JOSE standards. In versions 1.3.4 through 1.6.5, joserfc accepts oversized RFC7797 b64=false JWS payloads without applying JWSRegistry.maxpayloadlength, which can lead to resource exhaustion...

DEBIAN-CVE-2026-48990

joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption JOSE standards. In versions 1.3.4 through 1.6.5, joserfc accepts oversized RFC7797 b64=false JWS payloads without applying JWSRegistry.maxpayloadlength, which can lead to resource exhaustion...

CVE-2026-48990 joserfc: b64=false RFC7797 JWS payloads bypass JWSRegistry payload-size limits during deserialization

joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption JOSE standards. In versions 1.3.4 through 1.6.5, joserfc accepts oversized RFC7797 b64=false JWS payloads without applying JWSRegistry.maxpayloadlength, which can lead to resource exhaustion...

PT-2026-50551

Name of the Vulnerable Software and Affected Versions joserfc versions 1.3.4 through 1.6.5 Description joserfc is a Python library implementing JSON Object Signing and Encryption JOSE standards. The library fails to apply the JWSRegistry.max payload length limit when processing RFC7797 b64=false...

EUVD-2026-32919

PyJWT: Unauthenticated DoS via unbounded Base64URL decoding of unused payload segment in b64=false detached JWS...

PyJWT: Unauthenticated DoS via unbounded Base64URL decoding of unused payload segment in b64=false detached JWS

!NOTE Practical impact depends on whether request body-size limits are enforced upstream proxy/web-server/framework. Deployments with typical body-size caps ≤2 MB bound the amplifier significantly; deployments accepting larger token inputs are more exposed. When verifying detached JWS tokens usin...

CVE-2026-50634

A vulnerability in Apache CXF's JwsJsonContainerRequestFilter can be exploited to cause CXF to process metadata that was not authenticated by the accepted signature. This can bypass the application's assumption that accepted Content-Type or protected HTTP-header metadata came from a verified...

CVE-2026-50634

CVE-2026-50634 affects Apache CXF's JwsJsonContainerRequestFilter. The vulnerability allows CXF to process metadata that was not authenticated by the accepted signature, bypassing the assumption that Content-Type or protected HTTP-header metadata came from a verified signature. This can influence...