Maintainer Mode
Sign in with GitHub

python3Packages.jwcrypto

Sign in to subscribe
Health
Risk
risk 24 medium
  • +10 1 open advisory
  • +8 an OSV advisory has a public exploit (CISA)
  • +6 no maintainer
Version
1.5.6 no newer release known to repology
Channels
master 1.5.6 · nixos-unstable 1.5.6 · nixos-26.05 1.5.6 no channel is behind master
Advisories
GHSA-fjrm-76x2-c4q4 medium 5.3 public exploit JWCrypto: JWE ZIP decompression bomb (OSV, for this version)
CVE-2026-39373
Packaging
not read yet: the next index sweep reads it
Maintainers
none
Pull requests 0
None open.
Closed or merged in the synced window 2
Issues 1
JWCrypto: JWE ZIP decompression bomb 1.severity: security
#507925 by nixpkgs-security-tracker · opened 6mo ago · 0 comments