132 matches found
RLSA-2026:98061 Moderate: python-jwcrypto security update
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...
python-jwcrypto security update
An update is available for python-jwcrypto. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Python is an interpreted, interactive, object-oriented programming...
python-jwcrypto security update
An update is available for python-jwcrypto. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Python is an interpreted, interactive, object-oriented programming...
RLSA-2026:97858 Moderate: python-jwcrypto security update
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...
Moderate: Red Hat Security Advisory: python-jwcrypto security update
An update for python-jwcrypto is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerabilit...
RHEL 10 : python-jwcrypto (RHSA-2026:98061)
The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:98061 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level...
Moderate: Red Hat Security Advisory: python-jwcrypto security update
An update for python-jwcrypto is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...
RHEL 9 : python-jwcrypto (RHSA-2026:97858)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:97858 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic da...
Astra Linux – vulnerability in python-jwcrypto
JWCrypto implements the JWK, JWS, and JWE specifications using python-cryptography. Prior to version 1.5.7, an unauthenticated attacker could exhaust server memory by sending specially crafted JWE tokens with ZIP compression. The existing patch for CVE-2024-28102 limits input token size to 250KB...
Security update for python-jwcrypto (moderate)
openSUSE security update: security update for python-jwcrypto ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22073-1 Rating: moderate References: bsc1280816 Cross-References: CVE-2026-92091 CVSS scores: CVE-2026-92091 SUSE : 5.3...
Important: python-jwcrypto
Issue Overview: A flaw was found in jwcrypto. The JWK.importkey function validates the keyops JWK member for duplicate values using an algorithm with On^2 time complexity, and the length of keyops is not bounded. A remote, unauthenticated attacker can supply a JWK with a large keyops array to an...
Important: python-jwcrypto
Issue Overview: A flaw was found in jwcrypto. The JWK.importkey function validates the keyops JWK member for duplicate values using an algorithm with On^2 time complexity, and the length of keyops is not bounded. A remote, unauthenticated attacker can supply a JWK with a large keyops array to an...
Amazon Linux 2 : python-jwcrypto (ALAS-2026-3968)
The version of python-jwcrypto installed on the remote host is prior to 0.4.2-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3968 advisory. A flaw was found in jwcrypto. The JWK.importkey function validates the keyops JWK member for duplicate values using an...
OPENSUSE-SU-2026:22073-1 Security update for python-jwcrypto
This update for python-jwcrypto fixes the following issue: - CVE-2026-92091: JWK.importkey validates the keyops JWK member for duplicate values using a quadratic complexity algorithm, which allows attackers to cause a denial of service via excessive resource consumption bsc1280816...
SUSE-SU-2026:24218-1 Security update for python-jwcrypto
This update for python-jwcrypto fixes the following issue: - CVE-2026-92091: JWK.importkey validates the keyops JWK member for duplicate values using a quadratic complexity algorithm, which allows attackers to cause a denial of service via excessive resource consumption bsc1280816...
Security update for python-jwcrypto
This update for python-jwcrypto fixes the following issue: CVE-2026-92091: JWK.importkey validates the keyops JWK member for duplicate values using a quadratic complexity algorithm, which allows attackers to cause a denial of service via excessive resource consumption bsc1280816. Patch...
Rocky Linux 8 [CIQ] Security Update: bind-dyndb-ldap / bind-dyndb-ldap-debuginfo / etc Multiple Vulnerabilities (crlsa-2024_3267)
The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20243267 advisory. JWCrypto: denail of service Via specifically crafted JWE CVE-2023-6681 python-jwcrypto: malicious JWE token can cause denial of service CVE-2024-28102...
OESA-2026-4066 python-jwcrypto security update
Implements JWK, JWS, JWE specifications with python-cryptography Security Fixes: A flaw was found in jwcrypto. The JWK.importkey function validates the keyops JWK member for duplicate values using an algorithm with On^2 time complexity, and the length of keyops is not bounded. A remote,...
Security update for python-jwcrypto (moderate)
openSUSE Security Update: Security update for python-jwcrypto Announcement ID: openSUSE-SU-2026:0328-1 Rating: moderate References: 1277639 Cross-References: CVE-2026-80179 CVSS scores: CVE-2026-80179 SUSE: 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N Affected Products:...
