rpm package
opensuse/python-jwcrypto&distro=openSUSE Leap 16.0
pkg:rpm/opensuse/python-jwcrypto&distro=openSUSE%20Leap%2016.0
Vulnerabilities (2)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2026-84185 | Med | 5.9 | < 1.5.6-160000.4.1 | 1.5.6-160000.4.1 | Sep 3, 2026 | A flaw was found in the jwcrypto library, which is used for implementing Javascript Object Signing and Encryption (JOSE) standards. The issue occurs when the library verifies a General JSON Serialization JWS using a set of keys. Due to a coding error, the library fails to correct | |
| CVE-2026-80179 | Med | 5.9 | < 1.5.6-160000.4.1 | 1.5.6-160000.4.1 | Aug 28, 2026 | A flaw was found in jwcrypto. A remote attacker can send a specially crafted JSON Web Encryption (JWE) token containing numerous period delimiters. This malformed token can force the JWE.deserialize() function to allocate excessive memory, leading to a MemoryError. This issue res |
- affected < 1.5.6-160000.4.1fixed 1.5.6-160000.4.1
A flaw was found in the jwcrypto library, which is used for implementing Javascript Object Signing and Encryption (JOSE) standards. The issue occurs when the library verifies a General JSON Serialization JWS using a set of keys. Due to a coding error, the library fails to correct
- affected < 1.5.6-160000.4.1fixed 1.5.6-160000.4.1
A flaw was found in jwcrypto. A remote attacker can send a specially crafted JSON Web Encryption (JWE) token containing numerous period delimiters. This malformed token can force the JWE.deserialize() function to allocate excessive memory, leading to a MemoryError. This issue res