CVE-2025-65015
2 advisories.
PyPI/joserfc CVE-2025-65015: critical
joserfc has Possible Uncontrolled Resource Consumption Vulnerability Triggered by Logging Arbitrarily Large JWT Token Payloads
Action: Upgrade joserfc to 1.3.5 or later.
pip install joserfc==1.3.5pip install joserfc==1.4.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.3.3 | 1.3.5 | - |
| 1.4.0 | 1.4.2 | - |
Fixed versions
| 1.3.5 | 1.4.2 |
Sources
- osv: GHSA-frfh-8v73-gjg4
- https://github.com/authlib/joserfc/security/advisories/GHSA-frfh-8v73-gjg4
- https://nvd.nist.gov/vuln/detail/CVE-2025-65015
- https://github.com/authlib/joserfc/commit/63932f169d924caffafa761af2122b82059017f7
- https://github.com/authlib/joserfc/commit/673c8743fd0605b0e1de6452be6cba75f44e466b
- https://github.com/authlib/joserfc
- https://github.com/authlib/joserfc/releases/tag/1.3.5
- https://github.com/authlib/joserfc/releases/tag/1.4.2
CVE-2025-65015 · published · modified · JSON
PyPI/joserfc CVE-2025-65015: unknown
joserfc has Possible Uncontrolled Resource Consumption Vulnerability Triggered by Logging Arbitrarily Large JWT Token Payloads
Action: Upgrade joserfc to 1.3.5 or later.
pip install joserfc==1.3.5pip install joserfc==1.4.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.3.3 | 1.3.5 | - |
| 1.4.0 | 1.4.2 | - |
Fixed versions
| 1.3.5 | 1.4.2 |
Sources
- osv: PYSEC-2026-361
- https://github.com/authlib/joserfc/security/advisories/GHSA-frfh-8v73-gjg4
- https://nvd.nist.gov/vuln/detail/CVE-2025-65015
- https://github.com/authlib/joserfc/commit/63932f169d924caffafa761af2122b82059017f7
- https://github.com/authlib/joserfc/commit/673c8743fd0605b0e1de6452be6cba75f44e466b
- https://github.com/authlib/joserfc
- https://github.com/authlib/joserfc/releases/tag/1.3.5
- https://github.com/authlib/joserfc/releases/tag/1.4.2
- https://pypi.org/project/joserfc
- https://github.com/advisories/GHSA-frfh-8v73-gjg4
CVE-2025-65015 · published · modified · JSON