2 results · Clear filters · Feed
-
High 7.4
Weak PBKDF2 parameters for password-encrypted private-key export in jose
Use of Password Hash With Insufficient Computational Effort in the jose library allows an attacker who obtains a password-encrypted private-key export to recover the private key through an offline password-cracking attack. When jose exports a password-encrypt…
-
High 7.5
latchset jose through version 11 allows attackers to cause a denial of service (CPU consumption) via a large p2c (aka P…