Connect2id Nimbus JOSE + JWT before 10.0.2 allows a remote attacker to cause a denial of service via a deeply nested JSON object supplied in a JWT claim set, because of uncontrolled recursion.

MihailsKuzmins changed the title System.Text.Json source generator ignores nested classes System.Text.Json source generator does not handle collision of nested classes 5 days ago ...