Lucene search
+L

1 matches found

PyPA
PyPA
•added 2026/07/13 3:46 p.m.•32 views

joserfc: b64=false RFC7797 JWS payloads bypass JWSRegistry payload-size limits during deserialization

RFC7797 b64=false JWS payloads bypass JWSRegistry payload-size limits during deserialization SummaryTesting revealed that joserfc accepts oversized RFC7797 b64=false JWS payloads without applying JWSRegistry.maxpayloadlength.The normal JWS compact and flattened JSON paths reject payloads above th...

5.3CVSS6.8AI score0.00265EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder