CVE-2024-33664
on github
Published
Severity
CVSS v3:
N/A
CVSS v2:
N/A
Description
python-jose through 3.3.0 allows attackers to cause a denial of service (resource consumption) during a decode via a crafted JSON Web Encryption (JWE) token with a high compression ratio, aka a "JWT bomb." This is similar to CVE-2024-21319.
References
Configurations
CPE23 | Version Start | Version End | Exact Version |
---|