2 matches found
PYSEC-2024-232
python-jose through 3.3.0 has algorithm confusion with OpenSSH ECDSA keys and other key formats. This is similar to CVE-2022-29217...
6.5CVSS7AI score0.00307EPSS
SaveExploits1References3Affected Software1
PT-2024-4195
Name of the Vulnerable Software and Affected Versions python-jose versions 3.3.0 and earlier Description The issue is related to algorithm confusion with OpenSSH ECDSA keys and other key formats in the python-jose component. It is associated with the definition of a prefix blacklist for OpenSSH...
9.3CVSS6.6AI score0.00783EPSS
SaveExploits2References30
20