CVE-2026-119284 | authlib joserfc up to 1.7.5 Compact JWS Deserialization deserialize_compact allocation of resources (EUVD-2026-113401)

October 29, 2026 Yanac

A vulnerability classified as problematic was found in authlib joserfc up to 1.7.5. Affected by this issue is the function deserialize_compact of the component Compact JWS Deserialization. Such manipulation leads to allocation of resources.

This vulnerability is uniquely identified as CVE-2026-119284. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is advised.VulDB Recent EntriesRead More