Search results

JWT <code>aud</code> validation raises "Invalid audience" for <code>audience=None</code>

Status: Open.

#389 In mpdavis/python-jose;

· temple opened on Jul 22, 2025

Native .deb release for Debian 13 (Trixie)

Status: Open.

#378 In mpdavis/python-jose;

· collinwebdesigns opened on Apr 17, 2025

Weak Key Acceptance and Curve Mismatch in ECDSA (ES256/ES384/ES512) Signature Validation

Status: Open.

#377 In mpdavis/python-jose;

· JWTSecAPI opened on Apr 16, 2025

Jwt audience validation: support array instead of only string

Status: Open.

#374 In mpdavis/python-jose;

· ericbl opened on Mar 10, 2025

algorithm confusion issue

Status: Open.

#367 In mpdavis/python-jose;

· prasadayush opened on Jan 30, 2025

Multiple valid JWT Signatures for HMAC Algorithms (base64 malleability)

Status: Open.

#365 In mpdavis/python-jose;

· rb-x opened on Dec 29, 2024

CVE-2024-33663 IS COMING FOR PYTHON JOSE LATEST VERSION 3.3.0

Status: Open.

#364 In mpdavis/python-jose;

· parulchawla894 opened on Dec 11, 2024

iat being set to null is not handled properly

Status: Open.

#363 In mpdavis/python-jose;

· Colin-b opened on Sep 25, 2024

Ecdsa deprecation warning

Status: Open.

#362 In mpdavis/python-jose;

· nmoreaud opened on Sep 13, 2024

Algorithm confusion with OpenSSH ECDSA keys and other key formats

Status: Open.

#361 In mpdavis/python-jose;

· shripad-bhat opened on Jul 24, 2024

Provide advisory for developer to use Authlib in lieu of this package

Status: Open.

#359 In mpdavis/python-jose;

· twwildey opened on Jun 20, 2024

Remove unnecessary dependencies in production

Status: Open.

#351 In mpdavis/python-jose;

· whitehat101 opened on May 2, 2024