Threats Tagged 'cve-2026-80179'
View all threats tagged with 'cve-2026-80179'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-80179'
Click on any threat for detailed analysis and mitigation recommendations
0 This security update for python-jwcrypto addresses two vulnerabilities: a denial of service caused by malformed JWE tokens (CVE-2026-80179) and a JSON JWS key ID (kid) binding bypass during JWKSet verification (CVE-2026-84185). Both issues could impact the integrity and availability of cryptographic operations in the affected library. No specific affected versions or patch details are provided in the available data. Join the discussion | GCVE Database | 09/10/2026, 09:38:19 UTC Added: 09/17/2026, 01:58:49 UTC |
0 These are all security issues fixed in the python313-jwcrypto-1.6.0-1.1 package on the GA media of openSUSE Tumbleweed. Join the discussion | GCVE Database | 09/07/2026, 00:00:00 UTC Added: 06/02/2026, 21:44:01 UTC |
0 A flaw was found in jwcrypto. A remote attacker can send a specially crafted JSON Web Encryption (JWE) token containing numerous period delimiters. This malformed token can force the JWE.deserialize() function to allocate excessive memory, leading to a MemoryError. This issue results in a denial of service (DoS) for services that process untrusted JWE values. Join the discussion | CVE Database V5 | 08/27/2026, 21:14:23 UTC Added: 08/28/2026, 11:04:29 UTC |
0 A denial of service vulnerability (CVE-2024-28102) exists in the python-jwcrypto package used in Red Hat Enterprise Linux 9 and related distributions. The issue occurs when processing malicious JSON Web Encryption (JWE) tokens, causing the application to become unresponsive. Red Hat has issued security updates to address this vulnerability. The fix is available and should be applied to affected systems to prevent denial of service conditions. Join the discussion | GCVE Database | 04/30/2024, 00:00:00 UTC Added: 06/02/2026, 21:44:02 UTC |
Showing 1 to 4 of 4 results