Security: latchset/jwcrypto
Security Advisories
View known security vulnerabilities and report new vulnerabilities privately to maintainers.
-
Weak mitigation of CVE-2024-28102:JWT bomb Attack in `deserialize` functionGHSA-fjrm-76x2-c4q4 published
Apr 7, 2026 by simo5Moderate -
JWT bomb Attack in `deserialize` functionGHSA-j857-7rvv-vj97 published
Mar 6, 2024 by simo5Moderate -
DoS with algorithms that use PBKDF2 due to unbounded PBES2 Count valueGHSA-cw2r-4p82-qv79 published
Dec 26, 2023 by simo5Moderate -
Token substitution can lead to authentication bypassGHSA-gwp4-mcv4-w95j published
Sep 19, 2022 by simo5Moderate