CVE-2024-33663

ADVISORY - github

Summary

python-jose through 3.3.0 has algorithm confusion with OpenSSH ECDSA keys and other key formats. This is similar to CVE-2022-29217.

EPSS Score⁠: 0.00234 (0.314)

ADVISORY - nist

Use of a Broken or Risky Cryptographic Algorithm

ADVISORY - github

Use of a Broken or Risky Cryptographic Algorithm

ADVISORY - gitlab

OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities

Use of a Broken or Risky Cryptographic Algorithm

OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities

See which of your images are affected by this CVE and how to fix them by signing into Docker Scout.