Jonatan Männchen / EEF

ECDSA signature length is not validated in jose, allowing signature malleability

Weak PBKDF2 parameters for password-encrypted private-key export in jose

Infinite recursion (CPU denial-of-service) in JOSE.JWK.shared_secret/2 on mismatched key types

Decompression bomb via unbounded zlib:inflate in jose_jwe_zip:uncompress/2

HTTP/1.1 and HTTP/2 redirects resend basic_auth and cookie to a different scheme or port in hackney

SSRF allowlist bypass via percent-encoded bracketed IPv6 or trailing-dot IP literal in hackney

WebSocket frames keep reaching the WebSock after a server-initiated close in Bandit

jsv treats regex match budget exhaustion as a non-match, bypassing patternProperties and not

Custom cacerts or cacertfile do not restrict trust to the pinned CA in hackney

Attacker-controlled AES-GCM authentication tag length allows tag forgery in jose