Vulnerability GHSA-6c5p-j8vq-pqhj
High Risk
HIGH RISK
CVSS Score: 7.4
Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
2 years ago
April 26, 2024 at 12:30 AM UTC
python-jose algorithm confusion with OpenSSH ECDSA keys
0.1.0 - 3.3.0
0.1.0 - 3.3.0
Summary
python-jose algorithm confusion with OpenSSH ECDSA keys
Details
python-jose through 3.3.0 has algorithm confusion with OpenSSH ECDSA keys and other key formats. This is similar to CVE-2022-29217.
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Critical
4 days ago
python-jose algorithm confusion guard bypassed by DER-encoded public keys
0.1.0 - 3.5.0 PYSEC-2026-4298
0.1.0 - 3.5.0 PYSEC-2026-4298
Critical
1 month ago
python-jose algorithm confusion guard bypassed by DER-encoded public keys
0.1.0 - 3.5.0 GHSA-3qf3-8w2g-rqmx
0.1.0 - 3.5.0 GHSA-3qf3-8w2g-rqmx
Medium Risk
10 months ago
No summary available
0.1.0 - 3.3.0 PYSEC-2025-185
0.1.0 - 3.3.0 PYSEC-2025-185
Medium Risk
2 years ago
python-jose denial of service via compressed JWE content
0.1.0 - 3.3.0 GHSA-cjwg-qfpm-7377
0.1.0 - 3.3.0 GHSA-cjwg-qfpm-7377
Unknown
2 years ago
No summary available
0.1.0 - 3.3.0 PYSEC-2024-232
0.1.0 - 3.3.0 PYSEC-2024-232
Impacted packages
Timeline
Published
2 years ago
April 26, 2024 at 12:30 AM UTC
Fixed (3.4.0)
1 year ago
February 18, 2025 at 05:26 PM UTC
Last Modified
4 days ago
October 15, 2026 at 02:56 PM UTC