Skip to content

Vulnerability in guardrails Project #1331

@ankitdn

Description

@ankitdn

While working on guardrails Project, I discovered a Denial of Service (DoS) vulnerability in the authlib package. The issue occurs due to unbounded JOSE segment sizes — a malicious actor can craft an oversized JWS/JWT token that consumes excessive CPU and memory during decoding and verification.
CVE Link
CVE Report

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't working

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions