CVE-2024-29370

The python-jose library (version 3.3.0) contains a Denial-of-Service (DoS) vulnerability within the jwe.decrypt function. An attacker can trigger this by providing a malicious JSON Web Encryption (JWE) token featuring an exceptionally high compression ratio. When the server attempts to process th...