Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Debian · 11 | python-jwcrypto | 0.8.0-1+deb11u1 |
Vulnerabilities 1
-
Medium 6.8
JWCrypto vulnerable to JWT bomb Attack in `deserialize` function
JWCrypto implements JWK, JWS, and JWE specifications using python-cryptography. Prior to version 1.5.6, an attacker can cause a denial of service attack by passing in a malicious JWE Token with a high compression ratio. When the server processes this token, i…