Python-jose Project

    Dashboard / Vendors

    Products: 1
    Vulnerabilities: 5
    Known Exploited: 0
    2
    Critical Level Threats
    0
    High Level Threats
    3
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-85394

    python-jose through 3.5.0 Algorithm Confusion via DER-encoded Public Key as HMAC Secret

    Last Modified: Sep 04, 2026
    Published: Sep 03, 2026

    CVE-2024-29370

    python-jose: python-jose: Denial-of-Service via malicious JSON Web Encryption (JWE) token decompression

    Last Modified: Jan 05, 2026
    Published: Dec 17, 2025

    CVE-2024-33663

    python-jose: algorithm confusion with OpenSSH ECDSA keys and other key formats

    Last Modified: Sep 02, 2025
    Published: Apr 25, 2024

    CVE-2024-33664

    python-jose: allows attackers to cause a denial of service

    Last Modified: Sep 02, 2025
    Published: Apr 25, 2024

    CVE-2016-7036

    python-jose before 1.3.2 allows attackers to have unspecified impact by leveraging failure to use a constant time comparison for HMAC keys.

    Last Modified: Apr 20, 2025
    Published: Jan 23, 2017
    Items Per Page