GHSA-h6wq-jw7q-grxv

Source

https://github.com/advisories/GHSA-h6wq-jw7q-grxv

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2021/02/GHSA-h6wq-jw7q-grxv/GHSA-h6wq-jw7q-grxv.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-h6wq-jw7q-grxv

Withdrawn

2021-02-24T19:38:21Z

Published

2021-02-24T19:38:21Z

Modified

2024-12-01T05:28:15Z

Summary

Elliptic Curve Key Disclosure

Details

Affected versions of the package are vulnerable to Elliptic Curve Key Disclosure.

Database specific

{
    "cwe_ids":  [],
    "github_reviewed":  true,
    "github_reviewed_at":  "2019-05-23T07:37:09Z",
    "nvd_published_at":  null,
    "severity":  "HIGH"
}

References

Affected packages

Maven / org.bitbucket.b_c:jose4j

Package

Name: org.bitbucket.b_c:jose4j; View open source insights on deps.dev
Purl: pkg:maven/org.bitbucket.b_c/jose4j

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0.3.6

Fixed

0.5.5

Affected versions

0.*

0.3.6

0.3.7

0.3.8

0.3.9

0.4.0

0.4.1

0.4.2

0.4.3

0.4.4

0.5.0

0.5.1

0.5.2

0.5.3

0.5.4

Database specific

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2021/02/GHSA-h6wq-jw7q-grxv/GHSA-h6wq-jw7q-grxv.json"