Vulnerability Database · Debian · python-jwcrypto · Version
python-jwcrypto 0.8.0-1
0.8.0-1 is affected by 6 vulnerabilities.
The vulnerabilities that cover this exact version are listed below with the fixed version to move to.
Critical 0 High 0 Medium 3 Low 0 Unrated 3
-
Database updated 22/Oct/2026
Concerned about your application's security?
Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.
01 Vulnerabilities affecting this version
python-jwcrypto 0.8.0-1 vulnerabilities
6 vulnerabilities cover python-jwcrypto 0.8.0-1. Open the full list in the database.
| Vulnerability | Severity | Fixed version | Disclosed |
|---|---|---|---|
| Denial of Service Vulnerability in python-jwcrypto due to Malformed JWE Tokens | 5.9 medium | No fix published | 28 Aug 2026 |
| Memory Exhaustion Vulnerability in python-jwcrypto: CVE-2026-39373 | 5.3 medium | No fix published | 07 Apr 2026 |
| Denial of Service Vulnerability in python-jwcrypto: CVE-2023-6681 | 5.3 medium | No fix published | 12 Feb 2024 |
| Security Update for python-jwcrypto Package | N/A unrated | 0.8.0-1+deb11u1 | 09 Sep 2024 |
| Denial of Service Vulnerability in python-jwcrypto: High Compression Ratio JWE Token Exploit | N/A unrated | 0.8.0-1+deb11u1 | 21 Mar 2024 |
| Denial of Service Vulnerability in python-jwcrypto Package | N/A unrated | 0.8.0-1+deb11u1 | 21 Mar 2024 |
Looking for another version, or everything Vulert holds for python-jwcrypto?
Questions
About python-jwcrypto 0.8.0-1
Is python-jwcrypto 0.8.0-1 vulnerable?
Yes. 6 vulnerabilities in the Vulert database cover python-jwcrypto 0.8.0-1: 0 critical, 0 high, 3 medium and 0 low, plus 3 not yet rated. Each entry above names the fixed version to move to.
How do I monitor python-jwcrypto for upcoming vulnerabilities?
Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the python-jwcrypto version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.