-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stems from the absence of the unwrap method in the _Rsa15 class prior to the patch. The parent class's unwrap implementation (or lack thereof) did not include the critical mitigation steps:
The patch explicitly adds the unwrap method to _Rsa15 with these mitigations, confirming this was the vulnerable entry point. The CVE description and commit message directly reference this class/method as the location of the weakness.
PythonPython| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| jwcrypto | pip | < 0.3.2 | 0.3.2 |
Ongoing coverage of React2Shell