Skip to content
OpenAdvisories

Package · Hex

jose

9 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.4
    CVE-2026-65629

    Weak PBKDF2 parameters for password-encrypted private-key export in jose

    Use of Password Hash With Insufficient Computational Effort in the jose library allows an attacker who obtains a password-encrypted private-key export to recover the private key through an offline password-cracking attack. When jose exports a password-encrypt…

    potatosalad jose jose jose Debian Ubuntu Hex