Moole Vulnerability Database

Find real vulnerabilities before they ship

Medium

CVE-2024-33663

python-jose through 3.3.0 has algorithm confusion with OpenSSH ECDSA keys and other key formats. This is similar to CVE-2022-29217.

VectorNETWORK

PublishedApr 26, 2024, 00:15

Published Bycve@mitre.org

Base Score

Score6.5

Package (Ecosystem)IntroducedFixedLimit

python-jose(PyPI)03.4.0N/A

CWE-327

Base Score

6.5

Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Base SeverityMedium

Version

3.1

Attack Vector (AV)

NETWORK