OpenIDC / Cjose

3 CVEs

CVE ID	Description	Severity	CVSS	Published
CVE-2026-53939	OpenIDC/cjose uses all-zero Content Encryption Key for AES-CBC-HMAC JWE encryption	CRITICAL	9.1	Sep 8, 2026
CVE-2026-53938	OpenIDC/cjose has a heap buffer overflow in AES Key Wrap decryption (A128KW/A192KW/A256KW)	HIGH	8.2	Sep 8, 2026
CVE-2023-37464	Incorrect Authentication Tag length usage in AES GCM decryption in OpenIDC/cjose	HIGH	8.6	Jul 14, 2023

Rows per page

Showing 1 to 3 of 3 CVEs