panva

Products

ProductCVEsExploitedLatest
jose4–Mar 9, 2024
jose-node-cjs-runtime1–Apr 16, 2021
jose-node-esm-runtime1–Apr 16, 2021

Exploited and recent CVEs

  • CVE-2024-28176 Medium 4.9 jose vulnerable to resource exhaustion via specifically crafted JWE with compressed plaintext 2.1%
  • CVE-2022-36083 Medium 5.3 JOSE vulnerable to resource exhaustion via specifically crafted JWE 1.6%
  • CVE-2021-29446 Medium 5.9 Padding Oracle Attack due to Observable Timing Discrepancy in jose-node-cjs-runtime 1.1%
  • CVE-2021-29445 Medium 5.9 Padding Oracle Attack due to Observable Timing Discrepancy in jose-node-esm-runtime 1.1%
  • CVE-2021-29444 Medium 5.9 Padding Oracle Attack due to Observable Timing Discrepancy in jose-browser-runtime 1.1%
  • CVE-2021-29443 Medium 5.9 Padding Oracle Attack due to Observable Timing Discrepancy in jose 1.2%