joserfc 1.7.7

Source: https://github.com/authlib/joserfc
Tag scanned: 1.7.7
Compared with: 1.7.6 (0 signals introduced since)
Files: 142 scanned, 71 skipped (binary, oversized, or unrecognised)
Signals: 0 critical · 0 warn · 35 info
Scan time: 21.0 s
LLM review: Reviewed by claude-haiku-5-5 (Anthropic): 35 of 35 warn and critical signals; 35 demoted to info.
Disclude version: 4.0.0
Scanned (UTC): 2026-10-19 08:41

Signals

Ordered by severity, then signals introduced in this release. Hidden characters are shown as ⟨U+…⟩.

info ~~warn~~ → info by review encoding-base64 docs/guide/jwe.rst:35:5

base64-like blob (64 bytes, compression ratio 1.17) (raw pass, confidence 0.60)
```
    eyJhbGciOiJSU0EtT0FFUCIsImVuYyI6IkEyNTZHQ00ifQ.
    OKOawDo13gRp2ojaHV7LFpZcgV7T6DVZKTyKOMTYUmKoTCVJRgckCL9kiMT03JGe
    ipsEdY3mx_etLbbWSrFr05kLzcSr4qKAq7YN7e9jwQRb23nfa6c9d-StnImGyFDb
    Sv04uVuxIp5Zms1gNxKKK2Da14B8S4rzVRltdYwam_lDp5XnZAYpQdb76FdIKLaV
```
likely benign LLM, confidence 0.95 Example JWE compact token in library documentation.
Reasoning
Snippet is the header and body of a JWE compact serialization example in RST documentation; base64url-encoded JSON header and key material are expected in library docs.
info ~~warn~~ → info by review encoding-base64 docs/guide/jwk.rst:123:5

[embedded python] base64-like blob (736 bytes over 12 lines, compression ratio 0.80) (raw pass, confidence 0.60)
```
    -----BEGIN PUBLIC KEY-----
    MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAm0tWm31IQ3zYU27bk/NZ
    3wMJOJ+Moska3WqnptWyiVR+p/qCBlV18NUSwshoctTkETi8+HIhOjUPb0WRvQV0
    YcpsqBVdSuPZ3m4Q+uX/rudAoDKHJ6B7vwjfeg4w9aT/YF+Zi61tEy1c15rHKyXA
```
likely benign LLM, confidence 0.96 Sample RSA public key PEM in documentation.
Reasoning
A PEM-armored RSA public key example in documentation; the base64 is standard key encoding for illustration.
info ~~warn~~ → info by review encoding-base64 docs/guide/jwk.rst:192:5

[embedded python] base64-like blob (164 bytes over 3 lines, compression ratio 0.96) (raw pass, confidence 0.60)
```
    -----BEGIN EC PRIVATE KEY-----
    MHcCAQEEIBnRS4Tf1PY6Jb7QOwAM7OWUOMJTBenEWRvGBCGgctBfoAoGCCqGSM49
    AwEHoUQDQgAE3r15c+Yd+0GXKysfWtwkqF7k12ylNE9LdfRP4TfkUcJSQXyGQjcx
    U8E81rOHjo+9xv2e64n4X6pC3yuP+pX4eA==
```
likely benign LLM, confidence 0.96 Sample EC private key PEM in documentation.
Reasoning
A PEM EC private key example in docs. Looks like a documentation sample rather than a real secret; the finding is a generic base64 flag on PEM content.
info ~~warn~~ → info by review encoding-base64 docs/guide/jwk.rst:270:5

[embedded python] base64-like blob (100 bytes over 2 lines, compression ratio 1.11) (raw pass, confidence 0.60)
```
    -----BEGIN PRIVATE KEY-----
    MEcCAQAwBQYDK2VxBDsEOaVsPKMXOBfq9aHlDEaMlBY+FR63hwrINHa2X74uHXUr
    3/VXE8eMhrr8stXn41CQKqVmFEeL5Uj5Gg==
    -----END PRIVATE KEY-----
```
likely benign LLM, confidence 0.95 Sample Ed25519 private key PEM in documentation.
Reasoning
Short PEM-encoded Ed25519 private key example in documentation, consistent with a key-format illustration.
info ~~warn~~ → info by review encoding-base64 docs/guide/jws.rst:34:5

base64-like blob (64 bytes, compression ratio 1.17) (raw pass, confidence 0.60)
```
    eyJ0eXAiOiJKV1QiLA0KICJhbGciOiJIUzI1NiJ9.
    eyJpc3MiOiJqb2UiLA0KICJleHAiOjEzMDA4MTkzODAsDQogImh0dHA6Ly9leGFt
    cGxlLmNvbS9pc19yb290Ijp0cnVlfQ.
    dBjftJeZ4CVP-mB92K27uhbUJU1p1r_wW1gFWFOEjXk
```
likely benign LLM, confidence 0.96 Example JWS compact token in documentation.
Reasoning
Standard JWS compact serialization example from the RFC (header, payload, signature) in documentation.
info ~~warn~~ → info by review encoding-base64 docs/guide/jws.rst:86:19

base64-like blob (94 bytes, compression ratio 1.05) (raw pass, confidence 0.60)
```
    {
      "payload": "eyJpc3MiOiJqb2UiLA0KICJleHAiOjEzMDA4MTkzODAsDQogImh0dHA6Ly9leGFtcGxlLmNvbS9pc19yb290Ijp0cnVlfQ",
      "signatures": [
        {
```
likely benign LLM, confidence 0.96 Example JWS JSON payload string in documentation.
Reasoning
Base64url payload inside a JWS JSON serialization example; expected in docs for the library.
info ~~warn~~ → info by review encoding-base64 docs/guide/jws.rst:91:256

base64-like blob (95 bytes, compression ratio 1.04) (raw pass, confidence 0.60)
```
Hlb1L07Qe7K0GarZRmB_eSN9383LcOLn6_dO--xi12jzDwusC-eOkHWEsqtFZESc6BfI7noOPqvhJ1phCnvWh6IeYI2w9QOYEUipUTI8np6LbgGY9Fs98rqVt5AXLIhWkWywlVmtVrBp0igcN_IoypGlUPQGe77Rw"
```
likely benign LLM, confidence 0.96 Example JWS signature string in documentation.
Reasoning
Base64url signature value in a documented JWS example.
info ~~warn~~ → info by review encoding-base64 docs/guide/jws.rst:186:19

base64-like blob (94 bytes, compression ratio 1.05) (raw pass, confidence 0.60)
```
    {
      "payload": "eyJpc3MiOiJqb2UiLA0KICJleHAiOjEzMDA4MTkzODAsDQogImh0dHA6Ly9leGFtcGxlLmNvbS9pc19yb290Ijp0cnVlfQ",
      "protected": "eyJhbGciOiJFUzI1NiJ9",
      "header": {"kid":"e9bc097a-ce51-4036-9562-d2ade882db0d"},
```
likely benign LLM, confidence 0.96 Example JWS payload in documentation.
Reasoning
Repeated documentation sample of a JWS JSON payload with a protected header.
info ~~warn~~ → info by review encoding-base64 docs/guide/jws.rst:196:19

base64-like blob (94 bytes, compression ratio 1.05) (raw pass, confidence 0.60)
```
    {
      "payload": "eyJpc3MiOiJqb2UiLA0KICJleHAiOjEzMDA4MTkzODAsDQogImh0dHA6Ly9leGFtcGxlLmNvbS9pc19yb290Ijp0cnVlfQ",
      "signatures": [
        {
```
likely benign LLM, confidence 0.96 Example JWS payload in documentation.
Reasoning
Same documented JWS example payload, repeated in the guide.
info ~~warn~~ → info by review encoding-base64 docs/recipes/azure.rst:17:5

base64-like blob (84 bytes, compression ratio 1.13) (raw pass, confidence 0.60)
```
    eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsImtpZCI6Imk2bEdrM0ZaenhSY1ViMkMzbkVRN3N5SEpsWSJ9
    .eyJhdWQiOiI2ZTc0MTcyYi1iZTU2LTQ4NDMtOWZmNC1lNjZhMzliYjEyZTMiLCJpc3MiOiJodHRwczovL2x
    vZ2luLm1pY3Jvc29mdG9ubGluZS5jb20vNzJmOTg4YmYtODZmMS00MWFmLTkxYWItMmQ3Y2QwMTFkYjQ3L3Y
```
likely benign LLM, confidence 0.95 Example Azure JWT segments in recipe documentation.
Reasoning
Sample Azure AD JWT header and payload in a recipe doc; base64url JSON segments are expected.
info ~~warn~~ → info by review encoding-base64 docs/recipes/azure.rst:18:6

base64-like blob (924 bytes over 11 lines, compression ratio 0.70) (raw pass, confidence 0.60)
```
    eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsImtpZCI6Imk2bEdrM0ZaenhSY1ViMkMzbkVRN3N5SEpsWSJ9
    .eyJhdWQiOiI2ZTc0MTcyYi1iZTU2LTQ4NDMtOWZmNC1lNjZhMzliYjEyZTMiLCJpc3MiOiJodHRwczovL2x
    vZ2luLm1pY3Jvc29mdG9ubGluZS5jb20vNzJmOTg4YmYtODZmMS00MWFmLTkxYWItMmQ3Y2QwMTFkYjQ3L3Y
```
likely benign LLM, confidence 0.95 Example Azure JWT payload in recipe documentation.
Reasoning
Continuation of the same documented Azure JWT example; no execution or obfuscation involved.
info ~~warn~~ → info by review encoding-base64 docs/recipes/cheatsheet.md:34:1

[embedded python] base64-like blob (392 bytes over 7 lines, compression ratio 0.84) (raw pass, confidence 0.60)
```
pem_rsa = """-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwwS7I3t2fSTawG1DcNF
Cu6NECHT3eVkr2lYXXD2hz4ILiIST2Q3/YpzNA9CrRZDseA24Ax/8UNZsMi8G1M8
Dpq1jUMKA4NrWOTrraZQmD9q4+rZLNx7M5NV8uojSoPWFYIBFwXgwzJYOZ8RVobJ
```
likely benign LLM, confidence 0.95 Sample RSA public key in a Python snippet in documentation.
Reasoning
RSA public key PEM embedded in a Python code sample in a markdown cheatsheet; illustrative key material, not obfuscation.
info ~~warn~~ → info by review encoding-base64 docs/recipes/cheatsheet.md:46:1

[embedded python] base64-like blob (124 bytes over 2 lines, compression ratio 1.02) (raw pass, confidence 0.60)
```
pem_ec = """-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEBdy4ZhgfXuBXLWgIAVfH+qqbZ4ne
opI4cgNaZ85tQM0rzghtBbXTnP9gxj49fhos3P34nBlIdShM9vaS0yQwcA==
-----END PUBLIC KEY-----"""
```
likely benign LLM, confidence 0.96 Sample EC public key in a Python snippet in documentation.
Reasoning
Short EC public key PEM in a documentation code sample; standard key encoding.
info ~~warn~~ → info by review encoding-base64 docs/recipes/cheatsheet.md:53:1

[embedded python] base64-like blob (60 bytes, compression ratio 1.18) (raw pass, confidence 0.60)
```
pem_okp = """-----BEGIN PUBLIC KEY-----
MCowBQYDK2VwAyEAqfwZCPkk+0u/GeXg10A3xt6JdNgqcLHqL3jKgBmL8Ow=
-----END PUBLIC KEY-----"""
okp_key = jwk.import_key(pem_okp, "OKP")
```
likely benign LLM, confidence 0.95 A documentation example embedding a PEM public key for JWK import.
Reasoning
The blob is a PEM-encoded public key (BEGIN/END PUBLIC KEY markers) in a documentation example for importing an OKP JWK. Public key material in docs is expected, and the raw-pass base64 signal is a false positive on a standard key format.
info ~~warn~~ → info by review decoder-decompress-payload src/joserfc/_rfc7518/jwe_zips.py:23:28

file imports decoder module(s) zlib and calls `.decompress()` — embedded payload decompressed at runtime (ast pass, confidence 0.75)
```
        if s.startswith(self.GZIP_HEAD):
            decompressor = zlib.decompressobj()
        else:
            decompressor = zlib.decompressobj(-zlib.MAX_WBITS)
```
likely benign LLM, confidence 0.90 Implements JWE DEF decompression using zlib in the joserfc library.
Reasoning
This is the DEFLATE decompression path for JWE's standard 'DEF' compression algorithm, using zlib with GZIP header or raw-deflate window bits. Decompressing attacker-supplied input is the protocol's defined behaviour, not a hidden payload being run. The AST signal is a generic pattern match on legitimate library code.
info ~~warn~~ → info by review encoding-base64 src/joserfc/jwe.py:108:9

base64-like blob (64 bytes, compression ratio 1.17) (raw pass, confidence 0.60)
```
        OKOawDo13gRp2ojaHV7LFpZcgV7T6DVZKTyKOMTYUmKoTCVJRgckCL9kiMT03JGe
        ipsEdY3mx_etLbbWSrFr05kLzcSr4qKAq7YN7e9jwQRb23nfa6c9d-StnImGyFDb
        Sv04uVuxIp5Zms1gNxKKK2Da14B8S4rzVRltdYwam_lDp5XnZAYpQdb76FdIKLaV
```
likely benign LLM, confidence 0.95 A base64url sample string, likely a JWE example or test vector in a docstring.
Reasoning
The raw base64-like blob is a multi-line string in a JWE module, consistent with a docstring or RFC example ciphertext or key. It is high-entropy by nature of base64url data and has no decoding or execution path in the snippet.
info ~~warn~~ → info by review encoding-base64 src/joserfc/jws.py:171:9

base64-like blob (94 bytes over 2 lines, compression ratio 1.05) (raw pass, confidence 0.60)
```
        .
        eyJpc3MiOiJqb2UiLA0KICJleHAiOjEzMDA4MTkzODAsDQogImh0dHA6Ly9leGFt
        cGxlLmNvbS9pc19yb290Ijp0cnVlfQ
        .
```
likely benign LLM, confidence 0.95 A base64url JWS payload example from the RFC 7515 sample, in a docstring.
Reasoning
The blob decodes to the familiar RFC 7515 example JSON payload ({"iss":"joe", ...}) inside a JWS compact-serialization docstring. It is a documentation example of the format, not obfuscation.
info ~~warn~~ → info by review encoding-base64 tests/jwe/test_compact.py:219:22

base64-like blob (126 bytes, compression ratio 0.98) (raw pass, confidence 0.60)
```
        )
        encrypted = "eyJhbGciOiJQQkVTMi1IUzI1NitBMTI4S1ciLCJlbmMiOiJBMTI4Q0JDLUhTMjU2IiwicDJzIjoiUW9HcmNCcG5zX2NMV0NRUEVWdUEtZyIsInAyYyI6NTAwMDAwfQ.qdtshVQlPM-fW57DRVUnmwMyvBVzUZCm58zn7j5W7IP9S2-cBVTh_w.mMUagTUTRi7fLQ3VUi6g4w.Hi0-8_MusxEwRtW6dkjXzw.Ktm1FmBA9rPe0Vv8w0kZ2g"
        self.assertRaises(
```
likely benign LLM, confidence 0.95 A PBES2-encrypted JWE compact token used as a test vector.
Reasoning
The string is a complete JWE compact serialization with a PBES2 header (p2s, p2c), used as test input for assertRaises. Test vectors are expected in a JOSE library's test suite.
info ~~warn~~ → info by review encoding-base64 tests/jwe/test_ecdh_1pu.py:184:18

base64-like blob (72 bytes, compression ratio 1.15) (raw pass, confidence 0.60)
```
            "protected": (
                "eyJhbGciOiJFQ0RILTFQVStBMTI4S1ciLCJlbmMiOiJBMjU2Q0JDLUhTNTEyIiwiYXB1Ijoi"
                "UVd4cFkyVSIsImFwdiI6IlFtOWlJR0Z1WkNCRGFHRnliR2xsIiwiZXBrIjp7Imt0eSI6Ik9L"
                "UCIsImNydiI6IlgyNTUxOSIsIngiOiJrOW9mX2NwQWFqeTBwb1c1Z2FpeFhHczluSGt3ZzFB"
```
likely benign LLM, confidence 0.95 A fragment of a JWE protected-header test fixture for ECDH-1PU.
Reasoning
This is a split string literal forming a JWE protected header (ECDH-1PU, A256CBC-HS512, with an OKP epk). Protocol test fixtures are expected to be base64url-encoded and split across lines.
info ~~warn~~ → info by review encoding-base64 tests/jwe/test_ecdh_1pu.py:185:18

base64-like blob (72 bytes, compression ratio 1.15) (raw pass, confidence 0.60)
```
                "eyJhbGciOiJFQ0RILTFQVStBMTI4S1ciLCJlbmMiOiJBMjU2Q0JDLUhTNTEyIiwiYXB1Ijoi"
                "UVd4cFkyVSIsImFwdiI6IlFtOWlJR0Z1WkNCRGFHRnliR2xsIiwiZXBrIjp7Imt0eSI6Ik9L"
                "UCIsImNydiI6IlgyNTUxOSIsIngiOiJrOW9mX2NwQWFqeTBwb1c1Z2FpeFhHczluSGt3ZzFB"
                "RnFVQUZhMzlkeUJjIn19"
```
likely benign LLM, confidence 0.95 A continuation line of the ECDH-1PU JWE protected-header test fixture.
Reasoning
This line is a continuation of the same split base64url JWE protected-header test fixture. It is test data with no decoding or execution behaviour.
info ~~warn~~ → info by review encoding-base64 tests/jwe/test_ecdh_1pu.py:186:18

base64-like blob (72 bytes, compression ratio 1.15) (raw pass, confidence 0.60)
```
                "UVd4cFkyVSIsImFwdiI6IlFtOWlJR0Z1WkNCRGFHRnliR2xsIiwiZXBrIjp7Imt0eSI6Ik9L"
                "UCIsImNydiI6IlgyNTUxOSIsIngiOiJrOW9mX2NwQWFqeTBwb1c1Z2FpeFhHczluSGt3ZzFB"
                "RnFVQUZhMzlkeUJjIn19"
            ),
```
likely benign LLM, confidence 0.95 The final part of the ECDH-1PU JWE protected-header test fixture.
Reasoning
This is the continuation of the same split base64url protected-header fixture for ECDH-1PU test vectors. It is benign test data.
info ~~warn~~ → info by review encoding-base64 tests/jwe/test_example.py:469:14

base64-like blob (64 bytes, compression ratio 1.17) (raw pass, confidence 0.60)
```
            "eyJhbGciOiJSU0EtT0FFUCIsImVuYyI6IkEyNTZHQ00ifQ."
            "OKOawDo13gRp2ojaHV7LFpZcgV7T6DVZKTyKOMTYUmKoTCVJRgckCL9kiMT03JGe"
            "ipsEdY3mx_etLbbWSrFr05kLzcSr4qKAq7YN7e9jwQRb23nfa6c9d-StnImGyFDb"
            "Sv04uVuxIp5Zms1gNxKKK2Da14B8S4rzVRltdYwam_lDp5XnZAYpQdb76FdIKLaV"
```
likely benign LLM, confidence 0.95 A multi-line JWE example token used in example tests.
Reasoning
The lines are a split base64url JWE example (RSA-OAEP, A256GCM header and ciphertext) in an example test. Multi-line example data is standard in JOSE test suites.
info ~~warn~~ → info by review encoding-base64 tests/jwk/test_rsa_key.py:62:18

base64-like blob (64 bytes, compression ratio 1.17) (raw pass, confidence 0.60)
```
                "aEeXS1j82E375xxhWMHXyvjYecPT9fpwR_M9gV8n9Hrh2anTpTD93Dt62ypW3yDs"
                "JzBnTnrYu1iwWRgBKrEYY46qAZIrA2xAwnm2X7uGR1hghkqDp0Vqj3kbSCz1XyfC"
                "s6_LehBwtxHIyh8Ripy40p24moOAbgxVw3rxT_vlt3UVe4WO3JkJOzlpUf-KTVI2"
```
likely benign LLM, confidence 0.95 A split base64url RSA JWK parameter in a key test fixture.
Reasoning
This is a split base64url RSA key parameter from a JWK test fixture, such as the modulus or private exponent. Key parameters in test files are expected and carry no execution risk.
info ~~warn~~ → info by review encoding-base64 tests/jwk/test_rsa_key.py:71:14

base64-like blob (68 bytes, compression ratio 1.16) (raw pass, confidence 0.60)
```
        data["p"] = (
            "9gY2w6I6S6L0juEKsbeDAwpd9WMfgqFoeA9vEyEUuk4kLwBKcoe1x4HG68ik918hdDSE"
            "9vDQSccA3xXHOAFOPJ8R9EeIAbTi1VwBYnbTp87X-xcPWlEPkrdoUKW60tgs1aNd_Nnc"
            "9LEVVPMS390zbFxt8TN_biaBgelNgbC95sM"
```
likely benign LLM, confidence 0.95 A split base64url RSA prime-factor parameter in a JWK test fixture.
Reasoning
The lines are a split base64url RSA JWK parameter (the 'p' prime factor) in a test dictionary. This is standard test key material.
info ~~warn~~ → info by review encoding-base64 tests/jwk/test_rsa_key.py:136:18

base64-like blob (76 bytes, compression ratio 1.14) (raw pass, confidence 0.60)
```
            "n": (
                "qEr7algLblN5qcstFCfOkAVERAWOyq3UuIor3BZq6s932Zs97yrkKw6XhKobGlNKEXNJhFiKU9oG-XA1dyvwv"
                "9uRbFPiUxLC0IS1mnIeF1Uz3n9h8o3v23TIkbcTPPNsJJuSPiRybefddDBtld7i_9mzNjDR4Ios6DJCNthnIKc"
            ),
```
likely benign LLM, confidence 0.95 A split base64url RSA modulus in a JWK test fixture.
Reasoning
This is a split base64url RSA modulus ('n') in a JWK test fixture. It is public key test data with no decoding or execution behaviour.
info ~~warn~~ → info by review encoding-base64 tests/jwk/test_rsa_key.py:145:19

base64-like blob (86 bytes, compression ratio 1.05) (raw pass, confidence 0.60)
```
            "q": "wh0awdt7hnpdHJGbrbaC1Pr12MRd6bnraPTGewBB9o6KxPXpkSVBlm5mLuhEiB0gnuA933zxvt1bSHHUNuGGDQ",
            "dp": "1GFJ6YWx8w6_PLvx6vc6v3NMbiRQvDGXQBOOy3okfN7b_YWeC9M3HT2jZb9v2mpiuf-ZwFZuJogYsqZQVzYl8Q",
```
likely benign LLM, confidence 0.97 Base64url RSA private key parameter in a JWK test fixture.
Reasoning
The snippet shows RSA JWK test vector components (q, dp) encoded as base64url in a Python test file for a JWK library. These are expected fixtures, not obfuscation.
info ~~warn~~ → info by review encoding-base64 tests/rfc7520/test_jwe.py:133:9

base64-like blob (151 bytes over 3 lines, compression ratio 0.92) (raw pass, confidence 0.60)
```
        compact_data = """
        eyJhbGciOiJQQkVTMi1IUzUxMitBMjU2S1ciLCJwMnMiOiI4UTFTemluYXNSM3
        hjaFl6NlpaY0hBIiwicDJjIjo4MTkyLCJjdHkiOiJqd2stc2V0K2pzb24iLCJl
        bmMiOiJBMTI4Q0JDLUhTMjU2In0
```
likely benign LLM, confidence 0.97 Compact JWE token from RFC 7520 test vectors.
Reasoning
A multi-line compact JWE serialization in a test file, with the RFC 7520 reference context. Base64url-encoded JOSE header is the expected format.
info ~~warn~~ → info by review encoding-base64 tests/rfc7520/test_jwe.py:141:13

base64-like blob (103 bytes over 2 lines, compression ratio 1.03) (raw pass, confidence 0.60)
```
        .
        23i-Tb1AV4n0WKVSSgcQrdg6GRqsUKxjruHXYsTHAJLZ2nsnGIX86vMXqIi6IR
        sfywCRFzLxEcZBRnTvG3nhzPk0GDD7FMyXhUHpDjEYCNA_XOmzg8yZR9oyjo6l
        TF6si4q9FZ2EhzgFQCLO_6h5EVg3vR75_hkBsnuoqoM3dwejXBtIodN84PeqMb
```
likely benign LLM, confidence 0.97 Encrypted content segment of an RFC 7520 JWE test vector.
Reasoning
Continuation of the RFC 7520 JWE compact test vector; encrypted key/ciphertext material in base64url is standard for this test suite.
info ~~warn~~ → info by review encoding-base64 tests/rfc7520/test_jwe.py:145:10

base64-like blob (103 bytes over 2 lines, compression ratio 1.05) (raw pass, confidence 0.60)
```
        6asmas_dpSsz7H10fC5ni9xIz424givB1YLldF6exVmL93R3fOoOJbmk2GBQZL
        _SEGllv2cQsBgeprARsaQ7Bq99tT80coH8ItBjgV08AtzXFFsx9qKvC982KLKd
        PQMTlVJKkqtV4Ru5LEVpBZXBnZrtViSOgyg6AiuwaS-rCrcD_ePOGSuxvgtrok
        AKYPqmXUeRdjFJwafkYEkiuDCV9vWGAi1DH2xTafhJwcmywIyzi4BqRpmdn_N-
```
likely benign LLM, confidence 0.97 Ciphertext and tag portion of an RFC 7520 JWE test vector.
Reasoning
Further base64url lines of the RFC 7520 JWE test vector; the entropy is inherent to ciphertext and expected in this fixture.
info ~~warn~~ → info by review encoding-base64 tests/rfc7520/test_jwk.py:12:15

base64-like blob (81 bytes, compression ratio 1.06) (raw pass, confidence 0.60)
```
        "x": "AHKZLLOsCOzz5cY97ewNUajB957y-C-U88c3v13nmGZx6sYl_oJXu9A5RkTKqjqvjyekWF-7ytDyRXYgCF5cj0Kt",
        "y": "AdymlHvOiLxXkEhayXQnNCvDX4h9htZaCJN34kfmC6pV5OhQHiraVySsUdaQkAgDPrwQrJmbnX9cwlGfP-HqHZR1",
    }
    # https://datatracker.ietf.org/doc/html/rfc7520#section-3.2
```
likely benign LLM, confidence 0.97 Base64url EC public coordinate in an RFC 7520 JWK fixture.
Reasoning
EC key coordinates in a JWK test fixture, explicitly referenced to RFC 7520 section 3.2. Normal test data.
info ~~warn~~ → info by review encoding-base64 tests/rfc7520/test_jwk.py:22:19

base64-like blob (81 bytes, compression ratio 1.06) (raw pass, confidence 0.60)
```
            "y": "AdymlHvOiLxXkEhayXQnNCvDX4h9htZaCJN34kfmC6pV5OhQHiraVySsUdaQkAgDPrwQrJmbnX9cwlGfP-HqHZR1",
            "d": "AAhRON2r9cqXX1hg-RoI6R1tX5p2rUAYdmpHZoC1XNM56KtscrX6zbKipQrCW9CGZH3T4ubpnoTKLDYJ_fF3_rJt",
        }
```
likely benign LLM, confidence 0.97 Base64url EC key parameter in an RFC 7520 JWK fixture.
Reasoning
EC private key 'd' and public 'y' values in a standard RFC 7520 test vector for a JWK library. Expected test data.
info ~~warn~~ → info by review encoding-base64 tests/rfc7520/test_jws.py:74:36

base64-like blob (80 bytes, compression ratio 1.06) (raw pass, confidence 0.60)
```
                {
                    "protected": ("eyJhbGciOiJIUzI1NiIsImtpZCI6IjAxOGMwYWU1LTRkOWItNDcxYi1iZmQ2LWVlZjMxNGJjNzAzNyJ9"),
                    "signature": "s0h6KThzkfBBBkLspW1h84VsJZFTsPPqMDA7g1Md7p0",
                }
```
likely benign LLM, confidence 0.97 Base64url JWS protected header and signature in a test fixture.
Reasoning
Protected header and signature of a JWS JSON serialization test vector. The header decodes to a plain JSON header with alg and kid, which is ordinary JOSE structure.
info ~~warn~~ → info by review encoding-base64 tests/rfc7520/test_jws.py:82:28

base64-like blob (80 bytes, compression ratio 1.06) (raw pass, confidence 0.60)
```
        flattened_json = {
            "protected": ("eyJhbGciOiJIUzI1NiIsImtpZCI6IjAxOGMwYWU1LTRkOWItNDcxYi1iZmQ2LWVlZjMxNGJjNzAzNyJ9"),
            "signature": "s0h6KThzkfBBBkLspW1h84VsJZFTsPPqMDA7g1Md7p0",
        }
```
likely benign LLM, confidence 0.97 Base64url JWS protected header and signature in a flattened JSON fixture.
Reasoning
Same JWS flattened serialization fixture repeated in the test; standard base64url JOSE header and HMAC signature.
info ~~warn~~ → info by review encoding-base64 tests/rfc7520/test_jws.py:169:26

base64-like blob (66 bytes, compression ratio 1.17) (raw pass, confidence 0.60)
```
                        "Cdkn9Ybdlmi54ho0x924DUz8sK7ZXkhc7AFM8ObLfTvNCrqcI3Jkl2U"
                        "5IX3utNhODH6v7xgy1Qahsn0fyb4zSAkje8bAWz4vIfj5pCMYxxm4fgV3q7ZYhm5eD"
                    ),
                },
```
likely benign LLM, confidence 0.96 Base64url JWS payload fragment in a test fixture.
Reasoning
Base64url payload fragments concatenated in a test for JWS signing. Expected test vector content with no execution or hiding behavior.
info ~~warn~~ → info by review encoding-base64 tests/rfc7520/test_jws.py:173:35

base64-like blob (80 bytes, compression ratio 1.06) (raw pass, confidence 0.60)
```
                {
                    "protected": "eyJhbGciOiJIUzI1NiIsImtpZCI6IjAxOGMwYWU1LTRkOWItNDcxYi1iZmQ2LWVlZjMxNGJjNzAzNyJ9",
                    "signature": "s0h6KThzkfBBBkLspW1h84VsJZFTsPPqMDA7g1Md7p0",
                },
```
likely benign LLM, confidence 0.97 Base64url JWS protected header and signature in a test fixture.
Reasoning
Repeated JWS protected header and signature test fixture; ordinary base64url encoding of JOSE data.

Reproduce This Scan

Run disclude locally to verify. Add --format sarif for SARIF output. Add --llm (with an API key in the environment) to include the LLM review.

cargo install disclude --version 4.0.0
git clone https://github.com/authlib/joserfc joserfc && cd joserfc
git checkout 1.7.7
disclude scan --severity info --diff 1.7.6 .