Skip to content
OpenAdvisories

Package · Ubuntu

jose

10 known vulnerabilities.

2 results · Clear filters · Feed

  • High 7.4

    Weak PBKDF2 parameters for password-encrypted private-key export in jose

    Use of Password Hash With Insufficient Computational Effort in the jose library allows an attacker who obtains a password-encrypted private-key export to recover the private key through an offline password-cracking attack. When jose exports a password-encrypt…

  • High 7.5

    latchset jose through version 11 allows attackers to cause a denial of service (CPU consumption) via a large p2c (aka P…