Known vulnerabilities in python3-jwcrypto

Known vulnerabilities in python3-jwcrypto

Vendor: OpenAnolis

Software: python3-jwcrypto

Software CPE: cpe:2.3:o:openanolis:python3-jwcrypto:*:*:*:*:*:anolis_os:*:*

Website: https://openanolis.cn/

Total vulnerabilities: 14

Public exploits: 2

Known exploited (KEV): 0

Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Vulnerabilities (14)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU146777 - Improper Verification of Cryptographic Signature CVE-2026-84185	CWE-347	Low	No	No	1.5.7-2	02.09.2026	SB2026090287 SB2026092168
#VU125313 - Improper Handling of Highly Compressed Data (Data Amplification) CVE-2026-39373	CWE-409	Medium	No	No	1.5.7-1	08.04.2026	SB2026040864 SB20260417149 SB20260417150 and 4 more
#VU118628 - Resource exhaustion CVE-2025-59089	CWE-400	Medium	No	No	0.5.0-2	19.11.2025	SB2025111953 SB2025111954 SB2025111955 and 15 more
#VU118627 - Server-Side Request Forgery (SSRF) CVE-2025-59088	CWE-918	Medium	No	No	0.5.0-2	19.11.2025	SB2025111953 SB2025111954 SB2025111955 and 15 more
#VU116216 - Insufficient Granularity of Access Control CVE-2025-7493	CWE-1220	Medium	No	No	0.5.0-2	01.10.2025	SB2025100120 SB2025100123 SB2025100124 and 14 more
#VU112054 - Improper input validation CVE-2025-4404	CWE-20	Medium	Available	No	0.5.0-2	30.06.2025	SB2025063081 SB2025063085 SB2025063086 and 14 more
#VU92249 - Use of Password Hash With Insufficient Computational Effort CVE-2024-3183	CWE-916	Low	Available	No	0.5.0-2	19.06.2024	SB2024061917 SB2024061918 SB2024061919 and 11 more
#VU92247 - Improper Authorization CVE-2024-2698	CWE-285	Medium	No	No	0.5.0-2	19.06.2024	SB2024061917 SB2024061919 SB2024061920 and 5 more
#VU87180 - Resource exhaustion CVE-2024-28102	CWE-400	Medium	No	No	0.5.0-2	07.03.2024	SB2024030713 SB2024043074 SB2024050632 and 14 more
#VU87167 - Improper input validation CVE-2024-1481	CWE-20	Medium	No	No	0.5.0-2	06.03.2024	SB2024030645 SB2024030665 SB2024030666 and 5 more
#VU85268 - Cross-Site Request Forgery (CSRF) CVE-2023-5455	CWE-352	Medium	No	No	0.5.0-1.1	10.01.2024	SB2024011032 SB2024011039 SB2024011040 and 17 more
#VU84778 - Improper input validation CVE-2023-6681	CWE-20	Medium	No	No	0.5.0-2	26.12.2023	SB2023122623 SB2024021609 SB20240312252 and 6 more
#VU58095 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVE-2020-25719	CWE-362	Low	No	No	0.5.0-1	10.11.2021	SB2021111008 SB2021111201 SB2021121644 and 17 more
#VU48269 - Security Features CVE-2020-17049	CWE-254	Low	No	No	0.5.0-1.1	10.11.2020	SB2020111029 SB2021111015 SB2022121006 and 18 more