CVE-2024-29370
1 advisory.
PyPI/python-jose CVE-2024-29370: medium 5.3
In python-jose 3.3.0 (specifically jwe.decrypt), a vulnerability allows an attacker to cause a Denial-of-Service (DoS) condition by crafting a malicious JSON Web Encryption (JWE) token with an excepti
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 3.3.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2025-185
- https://github.com/mpdavis/python-jose/issues/344
- https://github.com/advisories/GHSA-h4pw-wxh7-4vjj
CVE-2024-29370 · published · modified · JSON