Jose

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-28176 npm MEDIUM PATCH This Month

jose is JavaScript module for JSON Object Signing and Encryption, providing support for JSON Web Tokens (JWT), JSON Web Signature (JWS), JSON Web Encryption (JWE), JSON Web Key (JWK), JSON Web Key. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required. This Uncontrolled Resource Consumption vulnerability could allow attackers to cause denial of service by exhausting system resources.

Denial Of Service Jose Fedora

NVD GitHub

CVSS 3.1

5.9

EPSS

2.1%

CVE-2022-36083 npm MEDIUM POC PATCH This Month

JOSE is "JSON Web Almost Everything" - JWA, JWS, JWE, JWT, JWK, JWKS with no dependencies using runtime's native crypto in Node.js, Browser, Cloudflare Workers, Electron, and Deno. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Denial Of Service Node.js Jose

NVD GitHub VulDB

CVSS 3.1

5.3

EPSS

1.1%

CVE-2021-29443 npm MEDIUM PATCH This Month

jose is an npm library providing a number of cryptographic operations. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required.

Information Disclosure Node.js Oracle Microsoft Jose

NVD GitHub VulDB

CVSS 3.1

5.9

EPSS

1.2%

CVE-2024-28176 npm

EPSS 2% CVSS 5.9

MEDIUM PATCH This Month

Denial Of Service Jose Fedora

NVD GitHub

CVE-2022-36083 npm

EPSS 1% CVSS 5.3

MEDIUM POC PATCH This Month

Denial Of Service Node.js Jose

NVD GitHub VulDB

CVE-2021-29443 npm

EPSS 1% CVSS 5.9

MEDIUM PATCH This Month

jose is an npm library providing a number of cryptographic operations. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required.

Information Disclosure Node.js Oracle +2

NVD GitHub VulDB