-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stems from the absence of the unwrap method in the _Rsa15 class prior to the patch. The parent class's unwrap implementation (or lack thereof) did not include the critical mitigation steps:
The patch explicitly adds the unwrap method to _Rsa15 with these mitigations, confirming this was the vulnerable entry point. The CVE description and commit message directly reference this class/method as the location of the weakness.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| jwcrypto | pip | < 0.3.2 | 0.3.2 |