Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
•added 2026/06/26 8:59 p.m.•24 views

joserfc: b64=false RFC7797 JWS payloads bypass JWSRegistry payload-size limits during deserialization

RFC7797 b64=false JWS payloads bypass JWSRegistry payload-size limits during deserialization Summary Testing revealed that joserfc accepts oversized RFC7797 b64=false JWS payloads without applying JWSRegistry.maxpayloadlength. The normal JWS compact and flattened JSON paths reject payloads above...

5.3CVSS6.9AI score0.00265EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder