Junglewise Threat Intelligence

CVE-2026-27932: PYSEC-2026-2529 - joserfc's PBES2 p2c Unbounded Iteration Count enables Denial of Service (DoS)

CVE-2026-27932 · Severity: low · CVSS 3.1 · Published 2026-07-13

Technologies: joserfc (PyPI). Vendors: PyPI.

Executive brief

joserfc's PBES2 p2c Unbounded Iteration Count enables Denial of Service (DoS)

Affected products

PyPI joserfc

Related threats

authlib joserfc authentication bypass via empty HMAC key
PYSEC-2026-361 - joserfc has Possible Uncontrolled Resource Consumption Vulnerability Triggered by Logging Arbitrarily Large JWT Token Payloads
authlib joserfc resource exhaustion via oversized RFC7797 payloads