Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-hhhv-q57g-882q
  • npm/jose
  • npm/jose-node-cjs-runtime
  • npm/jose-node-esm-runtime
 jose vulnerable to resource exhaustion via specifically crafted JWE with compressed plaintext 07 Mar 2024
  • Fix available
  • Severity - 5.3 (Medium)
GHSA-5h4j-qrvg-9xhw
  • npm/node-jose
 Improper calculations in ECC implementation can trigger a Denial-of-Service (DoS) 16 Feb 2023
  • Fix available
  • Severity - 7.5 (High)
GHSA-jv3g-j58f-9mq9
  • npm/jose
  • npm/jose-browser-runtime
  • npm/jose-node-cjs-runtime
  • npm/jose-node-esm-runtime
 JOSE vulnerable to resource exhaustion via specifically crafted JWE 16 Sep 2022
  • Fix available
  • Severity - 5.3 (Medium)
MAL-2022-4046
  • npm/jose-cookbook
 Malicious code in jose-cookbook (npm) 20 Jun 2022
  • No fix available
GHSA-jfxm-w8g2-4rcv
  • npm/node-jose
 Cisco node-jose improper validation of JWT signature 13 May 2022
  • Fix available
  • Severity - 7.5 (High)
GHSA-rvcw-f68w-8h8h
  • npm/jose-node-cjs-runtime
 Padding Oracle Attack due to Observable Timing Discrepancy in jose-node-cjs-runtime 19 Apr 2021
  • Fix available
  • Severity - 5.9 (Medium)
GHSA-4v4g-726h-xvfv
  • npm/jose-node-esm-runtime
 Padding Oracle Attack due to Observable Timing Discrepancy in jose-node-esm-runtime 19 Apr 2021
  • Fix available
  • Severity - 5.9 (Medium)
GHSA-94hh-pjjg-rwmr
  • npm/jose-browser-runtime
 Padding Oracle Attack due to Observable Timing Discrepancy in jose-browser-runtime 19 Apr 2021
  • Fix available
  • Severity - 5.9 (Medium)
GHSA-58f5-hfqc-jgch
  • npm/jose
 Padding Oracle Attack due to Observable Timing Discrepancy in jose 19 Apr 2021
  • Fix available
  • Severity - 5.9 (Medium)
GHSA-rvj9-8cvx-3vq9
  • npm/node-jose
 Invalid Curve Attack in node-jose 20 Jul 2018
  • Fix available
  • Severity - 5.9 (Medium)