Skip to content
OpenAdvisories

Product · panva

jose-node-cjs-runtime

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.9
    CVE-2021-29446

    Padding Oracle Attack due to Observable Timing Discrepancy in jose-node-cjs-runtime

    jose-node-cjs-runtime is an npm package which provides a number of cryptographic functions. In versions prior to 3.11.4 the AES_CBC_HMAC_SHA2 Algorithm (A128CBC-HS256, A192CBC-HS384, A256CBC-HS512) decryption would always execute both HMAC tag verification an…

    panva jose-node-cjs-runtime jose-node-cjs-runtime npm