Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
PYSEC-2026-4298
  • PyPI/python-jose
 python-jose algorithm confusion guard bypassed by DER-encoded public keys 16 hours ago
  • No fix available
  • Severity - 9.3 (Critical)
GHSA-3qf3-8w2g-rqmx
  • PyPI/python-jose
 python-jose algorithm confusion guard bypassed by DER-encoded public keys 03 Sep
  • No fix available
  • Severity - 9.3 (Critical)
PYSEC-2025-185
  • PyPI/python-jose
 See record for full details 17 Dec 2025
  • No fix available
  • Severity - 5.3 (Medium)
GHSA-6c5p-j8vq-pqhj
  • PyPI/python-jose
 python-jose algorithm confusion with OpenSSH ECDSA keys 26 Apr 2024
  • Fix available
  • Severity - 9.3 (Critical)
GHSA-cjwg-qfpm-7377
  • PyPI/python-jose
 python-jose denial of service via compressed JWE content 26 Apr 2024
  • Fix available
  • Severity - 5.3 (Medium)
PYSEC-2024-232
  • PyPI/python-jose
 python-jose through 3.3.0 has algorithm confusion with OpenSSH ECDSA keys and... 26 Apr 2024
  • Fix available
PYSEC-2024-233
  • PyPI/python-jose
 See record for full details 26 Apr 2024
  • Fix available
GHSA-w799-prg3-cx77
  • PyPI/python-jose
 python-jose failure to use a constant time comparison for HMAC keys 17 May 2022
  • Fix available
  • Severity - 9.8 (Critical)
PYSEC-2017-28
  • PyPI/python-jose
 See record for full details 23 Jan 2017
  • Fix available