Skip to content
OpenAdvisories

Package · Debian

node-jose

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 7.0
    CVE-2025-45767

    jose v6.0.10 was discovered to contain weak encryption. NOTE: this is disputed by a third party because the claim of "d…

    node-jose node-jose Debian Ubuntu
  • Medium 5.3
    CVE-2022-36083

    JOSE vulnerable to resource exhaustion via specifically crafted JWE

    JOSE is "JSON Web Almost Everything" - JWA, JWS, JWE, JWT, JWK, JWKS with no dependencies using runtime's native crypto in Node.js, Browser, Cloudflare Workers, Electron, and Deno. The PBKDF2-based JWE key management algorithms expect a JOSE Header Parameter …

    panva jose jose node-jose Debian Ubuntu npm