Skip to content
OpenAdvisories

Product · panva

jose-node-esm-runtime

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.9
    CVE-2021-29445

    Padding Oracle Attack due to Observable Timing Discrepancy in jose-node-esm-runtime

    jose-node-esm-runtime is an npm package which provides a number of cryptographic functions. In versions prior to 3.11.4 the AES_CBC_HMAC_SHA2 Algorithm (A128CBC-HS256, A192CBC-HS384, A256CBC-HS512) decryption would always execute both HMAC tag verification an…

    panva jose-node-esm-runtime jose-node-esm-runtime npm