Skip to content
OpenAdvisories

Product · HackerOne

node-jose node module

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.9
    CVE-2017-16007

    Invalid Curve Attack in node-jose

    node-jose is a JavaScript implementation of the JSON Object Signing and Encryption (JOSE) for current web browsers and node.js-based servers. node-jose earlier than version 0.9.3 is vulnerable to an invalid curve attack. This allows an attacker to recover the…

    HackerOne node-jose node module node-jose npm