[Git][security-tracker-team/security-tracker][master] new python-jose issue

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
cd38fe97 by Moritz Muehlenhoff at 2025-12-19T13:23:38+01:00
new python-jose issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1242,7 +1242,8 @@ CVE-2024-46060 (Anaconda3 macOS installers before 2024.06-1 contain a local priv
 CVE-2024-29371 (In jose4j before 0.9.5, an attacker can cause a Denial-of-Service (DoS ...)
 	TODO: check
 CVE-2024-29370 (In python-jose 3.3.0 (specifically jwe.decrypt), a vulnerability allow ...)
-	TODO: check
+	- python-jose <removed>
+	NOTE: https://github.com/mpdavis/python-jose/issues/344
 CVE-2025-68274 (SIPGO is a library for writing SIP services in the GO language. Starti ...)
 	NOT-FOR-US: SIPGO
 CVE-2025-64700 (Cross-site request forgery vulnerability exists in GROWI v7.3.3 and ea ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cd38fe978d2ddfffc34ce3ec2a46e39849770d2b

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cd38fe978d2ddfffc34ce3ec2a46e39849770d2b
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20251219/831c18bb/attachment.htm>