EUVD-2026-37805
GHSA-wphv-vfrh-23q5
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Network-reachable token submission requires no auth; availability impact is limited resource exhaustion, not crash; zero confidentiality or integrity impact.
Primary rating from Vendor (GitHub_M).
CVSS VectorVendor: GitHub_M
Lifecycle Timeline
3DescriptionCVE.org
joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption (JOSE) standards. In versions 1.3.4 through 1.6.5, joserfc accepts oversized RFC7797 b64=false JWS payloads without applying JWSRegistry.max_payload_length, which can lead to resource exhaustion. The normal JWS compact and flattened JSON paths reject payloads above the configured payload-size limit with ExceededSizeError. The RFC7797 unencoded payload paths do not make the same check. A valid b64=false compact or flattened JSON JWS can therefore deserialize successfully with a payload larger than JWSRegistry.max_payload_length. Applications that accept lower-trust JWS values and rely on joserfc to reject oversized token content during verification have a moderate availability risk. This issue has been fixed in version 1.6.7.
AnalysisAI
Resource exhaustion in joserfc (versions 1.3.4-1.6.5) is possible because the RFC7797 unencoded-payload (b64=false) JWS code path skips the configured JWSRegistry.max_payload_length check, while the standard compact and flattened JSON paths correctly raise ExceededSizeError. Remotely submitted, cryptographically valid b64=false JWS tokens with arbitrarily large payloads are deserialized without size enforcement, consuming memory or CPU on the verifying server. No public exploit has been identified and the vulnerability is not in the CISA KEV catalog; a vendor-released fix is available in version 1.6.7.
Technical ContextAI
joserfc (CPE cpe:2.3:a:authlib:joserfc:*:*:*:*:*:*:*:*) is the Python JOSE implementation from the authlib project, covering JWS, JWE, and JWT standards. RFC 7797 introduces an optional 'b64=false' JWS header that carries the payload in raw, unencoded form rather than Base64URL-encoded, typically used for detached or human-readable payloads. The library's standard JWS deserialization enforces JWSRegistry.max_payload_length and raises ExceededSizeError when the limit is exceeded; however, the RFC7797 code path that handles b64=false tokens omits this size check entirely. The root cause class is CWE-400 (Uncontrolled Resource Consumption): an externally supplied value - the JWS payload - is processed without an upper-bound constraint, allowing an attacker to drive arbitrarily high memory or CPU consumption during deserialization.
RemediationAI
Vendor-released patch: version 1.6.7, available at https://github.com/authlib/joserfc/releases/tag/1.6.7. The fix - commit 4d4ea2e - adds payload size validation to the b64=false JWS code path, bringing it into parity with the standard compact and flattened JSON paths. Upgrade joserfc to 1.6.7 or later via pip: 'pip install joserfc>=1.6.7'. If an immediate upgrade is not feasible, apply a compensating control at the application or HTTP gateway boundary: reject any inbound request whose token or request body exceeds the intended payload size limit before passing it to joserfc. This workaround requires careful tuning - setting the limit too low may reject legitimate large tokens - and does not eliminate the underlying library flaw, so patching remains the authoritative remediation. The security advisory is at https://github.com/authlib/joserfc/security/advisories/GHSA-wphv-vfrh-23q5.
Wazuh SIEM platform versions 4.4.0 through 4.9.0 contain an unsafe deserialization vulnerability in the DistributedAPI t
BentoML version 1.4.2 and earlier contains an unauthenticated remote code execution vulnerability through insecure deser
pgAdmin 4 contains critical remote code execution vulnerabilities in the Query Tool download and Cloud Deployment endpoi
The renderLocalView function in render/views.py in graphite-web in Graphite 0.9.5 through 0.9.10 uses the pickle Python
BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Rated critica
OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCiph
pyLoad download manager version prior to 0.5.0b3.dev77 exposes the Flask SECRET_KEY through an unauthenticated endpoint.
Langflow (a visual LLM pipeline builder) contains a critical unauthenticated code execution vulnerability (CVE-2026-3301
In Mercurial before 4.1.3, "hg serve --stdio" allows remote authenticated users to launch the Python debugger, and conse
Unauthenticated remote code execution affects Kestra OSS (the open-source event-driven orchestration platform) prior to
Unauthenticated remote code execution in Marimo ≤0.20.4 allows attackers to execute arbitrary system commands via the `/
pyLoad is the free and open-source Download Manager written in pure Python. Rated medium severity (CVSS 5.3), this vulne
Same weakness CWE-400 – Uncontrolled Resource Consumption
View allSame technique Denial Of Service
View allVendor StatusVendor
SUSE
Severity: Moderate| Product | Status |
|---|---|
| openSUSE Tumbleweed | Fixed |
Share
External POC / Exploit Code
Leaving vuln.today