GHSA-h6wq-jw7q-grxv

Suggest an improvement
Source
https://github.com/advisories/GHSA-h6wq-jw7q-grxv
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2021/02/GHSA-h6wq-jw7q-grxv/GHSA-h6wq-jw7q-grxv.json
JSON Data
https://api.osv.dev/v1/vulns/GHSA-h6wq-jw7q-grxv
Withdrawn
2021-02-24T19:38:21Z
Published
2021-02-24T19:38:21Z
Modified
2024-12-01T05:28:15.001015Z
Summary
Elliptic Curve Key Disclosure
Details

Affected versions of the package are vulnerable to Elliptic Curve Key Disclosure.

Database specific
{
    "nvd_published_at": null,
    "cwe_ids": [],
    "severity": "HIGH",
    "github_reviewed": true,
    "github_reviewed_at": "2019-05-23T07:37:09Z"
}
References

Affected packages

Maven / org.bitbucket.b_c:jose4j

Package

Name
org.bitbucket.b_c:jose4j
View open source insights on deps.dev
Purl
pkg:maven/org.bitbucket.b_c/jose4j

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0.3.6
Fixed
0.5.5

Affected versions

0.*

0.3.6
0.3.7
0.3.8
0.3.9
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.5.0
0.5.1
0.5.2
0.5.3
0.5.4