{"action":"Upgrade jwcrypto to 0.4.0 or later.","affected":[{"fixed":"0.4.0","introduced":"0"}],"component":"jwcrypto","cve_ids":["CVE-2016-6298"],"ecosystem":"PyPI","epss":0.02245,"exploited":false,"fixed_versions":["0.4.0"],"ghsa_id":"GHSA-wg33-x934-3ghh","id":"tcs_01M5KG6Y5Y3VR7RD79HFC7AT95","modified_at":"2026-06-10T17:01:21.807427846Z","published_at":"2016-09-01T23:59:00Z","references":["https://osv.dev/vulnerability/PYSEC-2016-4","https://github.com/latchset/jwcrypto/commit/eb5be5bd94c8cae1d7f3ba9801377084d8e5a7ba","https://github.com/latchset/jwcrypto/issues/65","https://github.com/latchset/jwcrypto/pull/66","https://github.com/latchset/jwcrypto/releases/tag/v0.3.2","http://www.securityfocus.com/bid/92729","https://github.com/advisories/GHSA-wg33-x934-3ghh"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2016-4","url":"https://osv.dev/vulnerability/PYSEC-2016-4"}],"summary":"The _Rsa15 class in the RSA 1.5 algorithm implementation in jwa.py in jwcrypto before 0.3.2 lacks the Random Filling protection mechanism, which makes it easier for remote attackers to obtain cleartex"}