joserfc has Possible Uncontrolled Resource Consumption Vulnerability Triggered by Logging Arbitrarily Large JWT Token Payloads
What to do
- Upgrade to a fixed version: joserfc 1.3.5, joserfc 1.4.2.
- Redeploy and restart long-running processes so they load the fixed code.
Affected packages
joserfc
- >= 1.3.3, < 1.3.5
- 1.3.5
Check your project: pip show joserfc
joserfc
- >= 1.4.0, < 1.4.2
- 1.4.2
Check your project: pip show joserfc