CVE-2026-119283 | authlib joserfc up to 1.7.4 Recipients Array joserfc.jwe joserfc.jwe.decrypt_json resource consumption

October 29, 2026 Yanac

A vulnerability, which was classified as problematic, was found in authlib joserfc up to 1.7.4. Affected by this vulnerability is the function joserfc.jwe.decrypt_json of the file joserfc.jwe of the component Recipients Array. Such manipulation leads to resource consumption.

This vulnerability is referenced as CVE-2026-119283. It is possible to launch the attack remotely. No exploit is available.

You should upgrade the affected component.VulDB Recent EntriesRead More