pkg:npm/jose

3 total CVEsMEDIUM3

✅ Check your installed version

All known vulnerabilities

  • MEDIUM5.9CVE-2021-29443Padding Oracle Attack due to Observable Timing Discrepancy in jose
    >= 1.0.0, < 1.28.1
  • MEDIUM5.3CVE-2024-28176jose vulnerable to resource exhaustion via specifically crafted JWE with compressed plaintext
    >= 3.0.0, < 4.15.5
  • MEDIUM5.3CVE-2022-36083JOSE vulnerable to resource exhaustion via specifically crafted JWE
    >= 1.0.0, < 1.28.2