Denial of Service

Every one of the 4 is a mark on the map. Named now: 1 to 4, most at risk first.

1. latchset jose through version 11 allows attackers to cause a denial of service (CPU consumption) via a large p2c (aka PBES2 Count) value.CVE-2023-50967Latchset · CVSS 7.5 · 1.4% likely

   CWE-400

2. JWCrypto vulnerable to JWT bomb Attack in `deserialize` functionCVE-2024-28102latchset · CVSS 6.8 · 1.0% likely

   CWE-770

3. Python-kdcproxy: remote dos via unbounded tcp upstream bufferingCVE-2025-59089latchset · CVSS 5.9 · 0.6% likely

   CWE-770

4. JWCrypto: JWE ZIP decompression bombCVE-2026-39373latchset · CVSS 5.3 · 0.3% likely

   CWE-409

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.