github.com/dvsekhvalnov/jose2go

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 5.3

CVE-2023-50658

jose2go vulnerable to denial of service via large p2c value

The jose2go component before 1.6.0 for Go allows attackers to cause a denial of service (CPU consumption) via a large p2c (aka PBES2 Count) value.

telegraf jitsucom-bulker-sidecar jitsucom-bulker-bulker jitsucom-bulker-ingmgr Debian Ubuntu Azure Linux Wolfi Go

Dec 25, 2023