LLatchset

Products

Exploited and recent CVEs

• CVE-2026-39373 Medium 5.3 JWCrypto: JWE ZIP decompression bomb 0.3%
• CVE-2025-59089 Medium 5.9 Python-kdcproxy: remote dos via unbounded tcp upstream buffering 0.6%
• CVE-2025-59088 High 8.6 Python-kdcproxy: unauthenticated ssrf via realm‑controlled dns srv 0.5%
• CVE-2025-11568 Medium 4.4 Luksmeta: data corruption when handling luks1 partitions with luksmeta 0.1%
• CVE-2024-28102 Medium 6.8 JWCrypto vulnerable to JWT bomb Attack in `deserialize` function 1.0%