PatchTheCVEjoserfc vulnerabilities and fixes
Recent CVEs affecting joserfc, with upgrade or downgrade steps. 2 tracked.
joserfc has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2026-03-03. Highest priority: CVE-2025-65015 (score 46/100).
- CVE-2025-65015 HIGH 7.5 UPGRADE joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption (JOS
- CVE-2026-27932 HIGH 7.5 UPGRADE joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption (JOS
FAQ
How do I fix joserfc vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is joserfc being exploited right now?
None of the tracked joserfc CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which joserfc CVE should I patch first?
CVE-2025-65015 currently ranks highest (46/100): joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption (JOS.