CVE-2024-28102

Risk Scores

Affected Products

Exploit Intelligence

• https://github.com/latchset/jwcrypto/security/advisories/GHSA-j857-7rvv-vj97 (nist-nvd)
• https://www.vicarius.io/vsociety/posts/denial-of-service-vulnerability-discovered-in-jwcrypto-cve-2024-28102-28103 (nist-nvd)

Timeline

• Jan 21, 1970 Security Advisory
• Mar 6, 2024 CVE Published
• Mar 7, 2024 EPSS Score
• Apr 2, 2024 EPSS Score
• Apr 29, 2024 EPSS Score
• May 25, 2024 EPSS Score
• Jun 20, 2024 EPSS Score
• Jul 17, 2024 EPSS Score
• Aug 12, 2024 EPSS Score
• Sep 7, 2024 EPSS Score
• Oct 4, 2024 Coalition ESS Score
• Oct 16, 2024 Coalition ESS Score

References

• ALAS2-2025-2763: python-jwcrypto (medium) advisory