Jose
Panva · 4 CVEs
CVE-2024-28176
MEDIUM
jose vulnerable to resource exhaustion via specifically crafted JWE with compressed plaintext
Mar 9, 2024
CVE-2022-36083
MEDIUM
JOSE vulnerable to resource exhaustion via specifically crafted JWE
Sep 7, 2022
CVE-2021-29444
MEDIUM
Padding Oracle Attack due to Observable Timing Discrepancy in jose-browser-runtime
Apr 16, 2021
CVE-2021-29443
MEDIUM
Padding Oracle Attack due to Observable Timing Discrepancy in jose
Apr 16, 2021
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2024-28176 | jose vulnerable to resource exhaustion via specifically crafted JWE with compressed plaintext | MEDIUM | 2.10% | Mar 9, 2024 |
| CVE-2022-36083 | JOSE vulnerable to resource exhaustion via specifically crafted JWE | MEDIUM | 1.54% | Sep 7, 2022 |
| CVE-2021-29444 | Padding Oracle Attack due to Observable Timing Discrepancy in jose-browser-runtime | MEDIUM | 1.07% | Apr 16, 2021 |
| CVE-2021-29443 | Padding Oracle Attack due to Observable Timing Discrepancy in jose | MEDIUM | 1.17% | Apr 16, 2021 |
Showing 1 to 4 of 4 CVEs