Summary

Versions of Python-Jose up to and including version 3.3.0 are affected by the JWT bomb; a vulnerability that leads to denial of service in the system when exploited by an attacker. This analysis shows how this vulnerability can be exploited and mitigated in the vulnerable versions of Python-Jose.

Description