Skip to content
OpenAdvisories

Product · Cisco

node-jose

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2023-25653

    Improper calculations in ECC implementation can trigger a Denial-of-Service (DoS)

    node-jose is a JavaScript implementation of the JSON Object Signing and Encryption (JOSE) for web browsers and node.js-based servers. Prior to version 2.2.0, when using the non-default "fallback" crypto back-end, ECC operations in `node-jose` can trigger a De…

    Cisco node-jose node-jose Network devices npm