[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2023-52428":6},{"stargazers_count":4,"fetched_at":5},7,"2026-08-01T22:22:45.889Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":413,"aliases":414,"duplicate_of":9,"upstream":416,"downstream":417,"duplicates":422,"related":423,"reserved_at":9,"published_at":438,"modified_at":439,"state":440,"summary":441,"references_raw":450,"kevs":483,"epss":484,"epss_history":487,"metrics":752,"affected":765},"CVE-2023-52428","In Connect2id Nimbus JOSE+JWT before 9.37.2, an attacker can cause a denial of service (resource consumption) via a large JWE p2c header value (aka iteration count) for the PasswordBasedDecrypter (PBKDF2) component.",null,[11,18],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":9,"likelihood_of_exploit":9,"capec":17},"NVD-CWE-NOINFO","Insufficient Information","NVD uses this CWE ID when there is insufficient information to assign a specific CWE.","placeholder","NVD-Reserved",[],{"_key":19,"id":19,"name":20,"description":21,"type":22,"status":23,"abstraction":24,"likelihood_of_exploit":25,"capec":26},"CWE-770","Allocation of Resources Without Limits or Throttling","The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.","weakness","Incomplete","Base","High",[27,113,123,127,131,135,139,143,175,237,241,245,275,305,337,341,345,349,353,357],{"id":28,"name":29,"techniques":30},"CAPEC-125","Flooding",[31,85],{"id":32,"name":33,"tactics":34,"countermeasures":38},"T1498.001","Direct Network Flood",[35],{"id":36,"name":37},"TA0105","Impact",[39,44,48,52,56,60,64,68,72,76,81],{"id":40,"name":41,"tactic":42},"D3-UGLPA","User Geolocation Logon Pattern Analysis",{"name":43},"Detect",{"id":45,"name":46,"tactic":47},"D3-PMAD","Protocol Metadata Anomaly Detection",{"name":43},{"id":49,"name":50,"tactic":51},"D3-CSPP","Client-server Payload Profiling",{"name":43},{"id":53,"name":54,"tactic":55},"D3-PHDURA","Per Host Download-Upload Ratio Analysis",{"name":43},{"id":57,"name":58,"tactic":59},"D3-NTSA","Network Traffic Signature Analysis",{"name":43},{"id":61,"name":62,"tactic":63},"D3-APCA","Application Protocol Command Analysis",{"name":43},{"id":65,"name":66,"tactic":67},"D3-NTCD","Network Traffic Community Deviation",{"name":43},{"id":69,"name":70,"tactic":71},"D3-RTSD","Remote Terminal Session Detection",{"name":43},{"id":73,"name":74,"tactic":75},"D3-ISVA","Inbound Session Volume Analysis",{"name":43},{"id":77,"name":78,"tactic":79},"D3-NTF","Network Traffic Filtering",{"name":80},"Isolate",{"id":82,"name":83,"tactic":84},"D3-ITF","Inbound Traffic Filtering",{"name":80},{"id":86,"name":87,"tactics":88,"countermeasures":90},"T1499","Endpoint Denial of Service",[89],{"id":36,"name":37},[91,93,95,97,99,101,103,105,107,109,111],{"id":40,"name":41,"tactic":92},{"name":43},{"id":45,"name":46,"tactic":94},{"name":43},{"id":49,"name":50,"tactic":96},{"name":43},{"id":53,"name":54,"tactic":98},{"name":43},{"id":57,"name":58,"tactic":100},{"name":43},{"id":61,"name":62,"tactic":102},{"name":43},{"id":65,"name":66,"tactic":104},{"name":43},{"id":69,"name":70,"tactic":106},{"name":43},{"id":73,"name":74,"tactic":108},{"name":43},{"id":77,"name":78,"tactic":110},{"name":80},{"id":82,"name":83,"tactic":112},{"name":80},{"id":114,"name":115,"techniques":116},"CAPEC-130","Excessive Allocation",[117],{"id":118,"name":119,"tactics":120,"countermeasures":122},"T1499.003","Application Exhaustion Flood",[121],{"id":36,"name":37},[],{"id":124,"name":125,"techniques":126},"CAPEC-147","XML Ping of the Death",[],{"id":128,"name":129,"techniques":130},"CAPEC-197","Exponential Data Expansion",[],{"id":132,"name":133,"techniques":134},"CAPEC-229","Serialized Data Parameter Blowup",[],{"id":136,"name":137,"techniques":138},"CAPEC-230","Serialized Data with Nested Payloads",[],{"id":140,"name":141,"techniques":142},"CAPEC-231","Oversized Serialized Data Payloads",[],{"id":144,"name":145,"techniques":146},"CAPEC-469","HTTP DoS",[147],{"id":148,"name":149,"tactics":150,"countermeasures":152},"T1499.002","Service Exhaustion Flood",[151],{"id":36,"name":37},[153,155,157,159,161,163,165,167,169,171,173],{"id":40,"name":41,"tactic":154},{"name":43},{"id":45,"name":46,"tactic":156},{"name":43},{"id":49,"name":50,"tactic":158},{"name":43},{"id":53,"name":54,"tactic":160},{"name":43},{"id":57,"name":58,"tactic":162},{"name":43},{"id":61,"name":62,"tactic":164},{"name":43},{"id":65,"name":66,"tactic":166},{"name":43},{"id":69,"name":70,"tactic":168},{"name":43},{"id":73,"name":74,"tactic":170},{"name":43},{"id":77,"name":78,"tactic":172},{"name":80},{"id":82,"name":83,"tactic":174},{"name":80},{"id":176,"name":177,"techniques":178},"CAPEC-482","TCP Flood",[179,205,211],{"id":32,"name":33,"tactics":180,"countermeasures":182},[181],{"id":36,"name":37},[183,185,187,189,191,193,195,197,199,201,203],{"id":40,"name":41,"tactic":184},{"name":43},{"id":45,"name":46,"tactic":186},{"name":43},{"id":49,"name":50,"tactic":188},{"name":43},{"id":53,"name":54,"tactic":190},{"name":43},{"id":57,"name":58,"tactic":192},{"name":43},{"id":61,"name":62,"tactic":194},{"name":43},{"id":65,"name":66,"tactic":196},{"name":43},{"id":69,"name":70,"tactic":198},{"name":43},{"id":73,"name":74,"tactic":200},{"name":43},{"id":77,"name":78,"tactic":202},{"name":80},{"id":82,"name":83,"tactic":204},{"name":80},{"id":206,"name":207,"tactics":208,"countermeasures":210},"T1499.001","OS Exhaustion Flood",[209],{"id":36,"name":37},[],{"id":148,"name":149,"tactics":212,"countermeasures":214},[213],{"id":36,"name":37},[215,217,219,221,223,225,227,229,231,233,235],{"id":40,"name":41,"tactic":216},{"name":43},{"id":45,"name":46,"tactic":218},{"name":43},{"id":49,"name":50,"tactic":220},{"name":43},{"id":53,"name":54,"tactic":222},{"name":43},{"id":57,"name":58,"tactic":224},{"name":43},{"id":61,"name":62,"tactic":226},{"name":43},{"id":65,"name":66,"tactic":228},{"name":43},{"id":69,"name":70,"tactic":230},{"name":43},{"id":73,"name":74,"tactic":232},{"name":43},{"id":77,"name":78,"tactic":234},{"name":80},{"id":82,"name":83,"tactic":236},{"name":80},{"id":238,"name":239,"techniques":240},"CAPEC-486","UDP Flood",[],{"id":242,"name":243,"techniques":244},"CAPEC-487","ICMP Flood",[],{"id":246,"name":247,"techniques":248},"CAPEC-488","HTTP Flood",[249],{"id":148,"name":149,"tactics":250,"countermeasures":252},[251],{"id":36,"name":37},[253,255,257,259,261,263,265,267,269,271,273],{"id":40,"name":41,"tactic":254},{"name":43},{"id":45,"name":46,"tactic":256},{"name":43},{"id":49,"name":50,"tactic":258},{"name":43},{"id":53,"name":54,"tactic":260},{"name":43},{"id":57,"name":58,"tactic":262},{"name":43},{"id":61,"name":62,"tactic":264},{"name":43},{"id":65,"name":66,"tactic":266},{"name":43},{"id":69,"name":70,"tactic":268},{"name":43},{"id":73,"name":74,"tactic":270},{"name":43},{"id":77,"name":78,"tactic":272},{"name":80},{"id":82,"name":83,"tactic":274},{"name":80},{"id":276,"name":277,"techniques":278},"CAPEC-489","SSL Flood",[279],{"id":148,"name":149,"tactics":280,"countermeasures":282},[281],{"id":36,"name":37},[283,285,287,289,291,293,295,297,299,301,303],{"id":40,"name":41,"tactic":284},{"name":43},{"id":45,"name":46,"tactic":286},{"name":43},{"id":49,"name":50,"tactic":288},{"name":43},{"id":53,"name":54,"tactic":290},{"name":43},{"id":57,"name":58,"tactic":292},{"name":43},{"id":61,"name":62,"tactic":294},{"name":43},{"id":65,"name":66,"tactic":296},{"name":43},{"id":69,"name":70,"tactic":298},{"name":43},{"id":73,"name":74,"tactic":300},{"name":43},{"id":77,"name":78,"tactic":302},{"name":80},{"id":82,"name":83,"tactic":304},{"name":80},{"id":306,"name":307,"techniques":308},"CAPEC-490","Amplification",[309],{"id":310,"name":311,"tactics":312,"countermeasures":314},"T1498.002","Reflection Amplification",[313],{"id":36,"name":37},[315,317,319,321,323,325,327,329,331,333,335],{"id":40,"name":41,"tactic":316},{"name":43},{"id":45,"name":46,"tactic":318},{"name":43},{"id":49,"name":50,"tactic":320},{"name":43},{"id":53,"name":54,"tactic":322},{"name":43},{"id":57,"name":58,"tactic":324},{"name":43},{"id":61,"name":62,"tactic":326},{"name":43},{"id":65,"name":66,"tactic":328},{"name":43},{"id":69,"name":70,"tactic":330},{"name":43},{"id":73,"name":74,"tactic":332},{"name":43},{"id":77,"name":78,"tactic":334},{"name":80},{"id":82,"name":83,"tactic":336},{"name":80},{"id":338,"name":339,"techniques":340},"CAPEC-491","Quadratic Data Expansion",[],{"id":342,"name":343,"techniques":344},"CAPEC-493","SOAP Array Blowup",[],{"id":346,"name":347,"techniques":348},"CAPEC-494","TCP Fragmentation",[],{"id":350,"name":351,"techniques":352},"CAPEC-495","UDP Fragmentation",[],{"id":354,"name":355,"techniques":356},"CAPEC-496","ICMP Fragmentation",[],{"id":358,"name":359,"techniques":360},"CAPEC-528","XML Flood",[361,387],{"id":148,"name":149,"tactics":362,"countermeasures":364},[363],{"id":36,"name":37},[365,367,369,371,373,375,377,379,381,383,385],{"id":40,"name":41,"tactic":366},{"name":43},{"id":45,"name":46,"tactic":368},{"name":43},{"id":49,"name":50,"tactic":370},{"name":43},{"id":53,"name":54,"tactic":372},{"name":43},{"id":57,"name":58,"tactic":374},{"name":43},{"id":61,"name":62,"tactic":376},{"name":43},{"id":65,"name":66,"tactic":378},{"name":43},{"id":69,"name":70,"tactic":380},{"name":43},{"id":73,"name":74,"tactic":382},{"name":43},{"id":77,"name":78,"tactic":384},{"name":80},{"id":82,"name":83,"tactic":386},{"name":80},{"id":32,"name":33,"tactics":388,"countermeasures":390},[389],{"id":36,"name":37},[391,393,395,397,399,401,403,405,407,409,411],{"id":40,"name":41,"tactic":392},{"name":43},{"id":45,"name":46,"tactic":394},{"name":43},{"id":49,"name":50,"tactic":396},{"name":43},{"id":53,"name":54,"tactic":398},{"name":43},{"id":57,"name":58,"tactic":400},{"name":43},{"id":61,"name":62,"tactic":402},{"name":43},{"id":65,"name":66,"tactic":404},{"name":43},{"id":69,"name":70,"tactic":406},{"name":43},{"id":73,"name":74,"tactic":408},{"name":43},{"id":77,"name":78,"tactic":410},{"name":80},{"id":82,"name":83,"tactic":412},{"name":80},[],[415],"GHSA-gvpg-vgmx-xg6w",[],[418,420],{"_key":419},"RHSA-2024:8823",{"_key":421},"RHSA-2024:8824",[],[424,426,428,430,432,434,436],{"_key":425},"CGA-63MV-W982-8Q6X",{"_key":427},"CGA-7847-H394-6RG8",{"_key":429},"CGA-7V5W-R37C-32W7",{"_key":431},"CGA-7X8R-HC4W-927C",{"_key":433},"CGA-88MJ-XQRJ-5RG4",{"_key":435},"CGA-XQHQ-97GR-PFG7",{"_key":437},"CGA-Q8F4-HF48-HQ6G","2024-02-11T00:00:00.000Z","2024-10-30T19:50:55.784Z","Modified",{"cisa_kev":442,"cisa_ransomware":442,"cisa_vendor":9,"epss_severity":443,"epss_score":444,"severity":445,"severity_score":446,"severity_version":447,"severity_source":448,"severity_vector":449,"severity_status":440},false,"low",0.00814,"high",7.5,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",[451,457,464,469,474,479],{"url":452,"sources":453,"tags":455},"https://bitbucket.org/connect2id/nimbus-jose-jwt/issues/526/",[448,454],"nvd",[456],"Issue Tracking",{"url":458,"sources":459,"tags":461},"https://connect2id.com/products/nimbus-jose-jwt",[448,454,460],"osv_maven",[462,463],"Product","WEB",{"url":465,"sources":466,"tags":467},"https://bitbucket.org/connect2id/nimbus-jose-jwt/commits/3b3b77e",[448,454,460],[468,463],"Patch",{"url":470,"sources":471,"tags":472},"https://nvd.nist.gov/vuln/detail/CVE-2023-52428",[460],[473],"Advisory",{"url":475,"sources":476,"tags":477},"https://bitbucket.org/connect2id/nimbus-jose-jwt",[460],[478],"PACKAGE",{"url":480,"sources":481,"tags":482},"https://bitbucket.org/connect2id/nimbus-jose-jwt/issues/526",[460],[463],[],{"date":485,"score":444,"percentile":486},"2026-07-06",0.52588,[488,492,495,498,500,503,506,509,512,515,518,521,524,527,530,534,537,540,543,546,549,552,555,559,562,565,568,571,574,577,580,583,586,589,592,594,597,600,603,606,608,611,614,617,620,623,626,629,632,635,638,641,644,647,649,652,655,657,660,663,666,669,672,675,678,680,683,686,689,692,695,698,701,704,707,709,712,715,718,721,724,727,730,732,735,738,740,743,746,749],{"date":489,"score":490,"percentile":491},"2025-11-04",0.00078,0.23774,{"date":493,"score":490,"percentile":494},"2025-11-05",0.23759,{"date":496,"score":490,"percentile":497},"2025-11-06",0.23765,{"date":499,"score":490,"percentile":491},"2025-11-07",{"date":501,"score":490,"percentile":502},"2025-11-08",0.23763,{"date":504,"score":490,"percentile":505},"2025-11-09",0.23711,{"date":507,"score":490,"percentile":508},"2025-11-10",0.23666,{"date":510,"score":490,"percentile":511},"2025-11-11",0.23681,{"date":513,"score":490,"percentile":514},"2025-11-12",0.23718,{"date":516,"score":490,"percentile":517},"2025-11-13",0.23717,{"date":519,"score":490,"percentile":520},"2025-11-14",0.23704,{"date":522,"score":490,"percentile":523},"2025-11-15",0.23688,{"date":525,"score":490,"percentile":526},"2025-11-16",0.2364,{"date":528,"score":490,"percentile":529},"2025-11-17",0.236,{"date":531,"score":532,"percentile":533},"2025-11-18",0.00338,0.53609,{"date":535,"score":532,"percentile":536},"2025-11-19",0.53623,{"date":538,"score":532,"percentile":539},"2025-11-20",0.5361,{"date":541,"score":490,"percentile":542},"2025-11-21",0.23541,{"date":544,"score":490,"percentile":545},"2025-11-22",0.23537,{"date":547,"score":490,"percentile":548},"2025-11-23",0.23495,{"date":550,"score":490,"percentile":551},"2025-11-24",0.2346,{"date":553,"score":490,"percentile":554},"2025-11-25",0.2345,{"date":556,"score":557,"percentile":558},"2025-11-26",0.0008,0.23983,{"date":560,"score":557,"percentile":561},"2025-11-27",0.23976,{"date":563,"score":557,"percentile":564},"2025-11-28",0.23953,{"date":566,"score":557,"percentile":567},"2025-11-29",0.23932,{"date":569,"score":557,"percentile":570},"2025-11-30",0.23911,{"date":572,"score":557,"percentile":573},"2025-12-01",0.23958,{"date":575,"score":557,"percentile":576},"2025-12-02",0.23974,{"date":578,"score":557,"percentile":579},"2025-12-03",0.23988,{"date":581,"score":557,"percentile":582},"2025-12-04",0.23914,{"date":584,"score":557,"percentile":585},"2025-12-05",0.23963,{"date":587,"score":557,"percentile":588},"2025-12-06",0.23961,{"date":590,"score":557,"percentile":591},"2025-12-07",0.23925,{"date":593,"score":557,"percentile":567},"2025-12-08",{"date":595,"score":490,"percentile":596},"2025-12-09",0.23464,{"date":598,"score":490,"percentile":599},"2025-12-10",0.23535,{"date":601,"score":490,"percentile":602},"2025-12-11",0.23573,{"date":604,"score":490,"percentile":605},"2025-12-12",0.23587,{"date":607,"score":490,"percentile":605},"2025-12-13",{"date":609,"score":490,"percentile":610},"2025-12-14",0.23554,{"date":612,"score":490,"percentile":613},"2025-12-15",0.23532,{"date":615,"score":490,"percentile":616},"2025-12-16",0.23553,{"date":618,"score":490,"percentile":619},"2025-12-17",0.23634,{"date":621,"score":490,"percentile":622},"2025-12-18",0.23672,{"date":624,"score":490,"percentile":625},"2025-12-19",0.23692,{"date":627,"score":490,"percentile":628},"2025-12-20",0.23663,{"date":630,"score":490,"percentile":631},"2025-12-21",0.23608,{"date":633,"score":490,"percentile":634},"2025-12-22",0.2357,{"date":636,"score":490,"percentile":637},"2025-12-23",0.23551,{"date":639,"score":490,"percentile":640},"2025-12-24",0.23566,{"date":642,"score":490,"percentile":643},"2025-12-25",0.23646,{"date":645,"score":490,"percentile":646},"2025-12-26",0.23631,{"date":648,"score":490,"percentile":619},"2025-12-27",{"date":650,"score":490,"percentile":651},"2025-12-28",0.23544,{"date":653,"score":490,"percentile":654},"2025-12-29",0.23516,{"date":656,"score":490,"percentile":548},"2025-12-30",{"date":658,"score":490,"percentile":659},"2025-12-31",0.23552,{"date":661,"score":490,"percentile":662},"2026-01-01",0.23657,{"date":664,"score":490,"percentile":665},"2026-01-02",0.23647,{"date":667,"score":490,"percentile":668},"2026-01-03",0.23628,{"date":670,"score":490,"percentile":671},"2026-01-04",0.23534,{"date":673,"score":490,"percentile":674},"2026-01-05",0.2351,{"date":676,"score":490,"percentile":677},"2026-01-06",0.23519,{"date":679,"score":490,"percentile":610},"2026-01-07",{"date":681,"score":490,"percentile":682},"2026-01-08",0.23602,{"date":684,"score":490,"percentile":685},"2026-01-09",0.23589,{"date":687,"score":490,"percentile":688},"2026-01-10",0.23572,{"date":690,"score":490,"percentile":691},"2026-01-11",0.23548,{"date":693,"score":490,"percentile":694},"2026-01-12",0.23513,{"date":696,"score":490,"percentile":697},"2026-01-13",0.2349,{"date":699,"score":490,"percentile":700},"2026-01-14",0.2355,{"date":702,"score":490,"percentile":703},"2026-01-15",0.23543,{"date":705,"score":490,"percentile":706},"2026-01-16",0.23579,{"date":708,"score":490,"percentile":706},"2026-01-17",{"date":710,"score":490,"percentile":711},"2026-01-18",0.2353,{"date":713,"score":490,"percentile":714},"2026-01-19",0.23485,{"date":716,"score":490,"percentile":717},"2026-01-20",0.23456,{"date":719,"score":490,"percentile":720},"2026-01-21",0.23411,{"date":722,"score":490,"percentile":723},"2026-01-22",0.23393,{"date":725,"score":490,"percentile":726},"2026-01-23",0.23479,{"date":728,"score":490,"percentile":729},"2026-01-24",0.23498,{"date":731,"score":490,"percentile":720},"2026-01-25",{"date":733,"score":490,"percentile":734},"2026-01-26",0.23304,{"date":736,"score":490,"percentile":737},"2026-01-27",0.23294,{"date":739,"score":490,"percentile":737},"2026-01-28",{"date":741,"score":490,"percentile":742},"2026-01-29",0.23249,{"date":744,"score":490,"percentile":745},"2026-01-30",0.23243,{"date":747,"score":490,"percentile":748},"2026-01-31",0.23245,{"date":750,"score":490,"percentile":751},"2026-02-01",0.23289,[753,758,760],{"source":448,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":754,"cvss_v4_0":9},{"baseScore":446,"baseSeverity":755,"vectorString":449,"impactScore":756,"exploitabilityScore":757},"HIGH",6,10,{"source":454,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":759,"cvss_v4_0":9},{"baseScore":446,"baseSeverity":755,"vectorString":449,"impactScore":756,"exploitabilityScore":757},{"source":460,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":761,"cvss_v4_0":762},{"baseScore":446,"baseSeverity":9,"vectorString":449,"impactScore":756,"exploitabilityScore":757},{"baseScore":763,"baseSeverity":9,"vectorString":764,"impactScore":9,"exploitabilityScore":9},8.7,"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",[766,778],{"ecosystem":9,"name":767,"vendor":768,"product":769,"cpe_part":770,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":771},"nimbus jose\\+jwt","connect2id","nimbus_jose\\+jwt","a",[772],{"version":773,"is_range":774,"range_type":775,"version_start":9,"version_start_type":9,"version_end":776,"version_end_type":777,"fixed_in":9},"lt9.37.2",true,"cpe","9.37.2","excluding",{"ecosystem":779,"name":780,"vendor":781,"product":782,"cpe_part":9,"purl_type":783,"purl_namespace":781,"purl_name":782,"source":9,"versions":784},"Maven","com.nimbusds:nimbus-jose-jwt","com.nimbusds","nimbus-jose-jwt","maven",[785],{"version":786,"is_range":774,"range_type":787,"version_start":9,"version_start_type":9,"version_end":776,"version_end_type":777,"fixed_in":9},"lt9_37_2","ecosystem"]