漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
Connect2id Nimbus JOSE + JWT 10.0.x before 10.0.2 and 9.37.x before 9.37.4 allows a remote attacker to cause a denial of service via a deeply nested JSON object supplied in a JWT claim set, because of uncontrolled recursion. NOTE: this is independent of the Gson 2.11.0 issue because the Connect2id product could have checked the JSON object nesting depth, regardless of what limits (if any) were imposed by Gson.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L
Vulnerability Type
未经控制的递归
Vulnerability Title
Connect2id Nimbus JOSE + JWT 安全漏洞
Vulnerability Description
Connect2id Nimbus JOSE + JWT是Connect2id公司的一款Java库。 Connect2id Nimbus JOSE + JWT 10.0.2之前版本存在安全漏洞，该漏洞源于JSON对象嵌套处理不当，可能导致拒绝服务攻击。
CVSS Information
N/A
Vulnerability Type
N/A