CVE-2026-119284: joserfc: Compact JWS size guard allocates attacker-controlled segments before rejection

Severity: medium. ## Summary joserfc 1.7.4 defines compact-JWS header, payload, and signature limits, but calls `value.split(b".")` before validating them. Python `bytes.split()` copies the attacker-controlled segments, so the current guard allocates roughly one complete payload before rejecting it. ## Reproduction

Читать первоисточник →