https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 11:51:53 +0000 https://db.gcve.eu/vuln/ghsa-xwmg-2g98-w7v9 <p><strong>Affected:</strong> Maven: com.nimbusds:nimbus-jose-jwt</p> <p>Connect2id Nimbus JOSE + JWT before 10.0.2 allows a remote attacker to cause a denial of service via a deeply nested JSON object supplied in a JWT claim set, because of uncontrolled recursion. NOTE: this is independent of the Gson 2.11.0 issue because the Connect2id product could have checked the JSON object nesting depth, regardless of what limits (if any) were imposed by Gson.</p> <p><strong>Affected:</strong> Maven: com.nimbusds:nimbus-jose-jwt</p> <p>Connect2id Nimbus JOSE + JWT before 10.0.2 allows a remote attacker to cause a denial of service via a deeply nested JSON object supplied in a JWT claim set, because of uncontrolled recursion. NOTE: this is independent of the Gson 2.11.0 issue because the Connect2id product could have checked the JSON object nesting depth, regardless of what limits (if any) were imposed by Gson.</p> https://db.gcve.eu/vuln/ghsa-xwmg-2g98-w7v9