jose vulnerabilities

1 known vulnerability in jose from Appsup-dart. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  jose: Improper Verification of Cryptographic Signature

  CVE-2026-34240Mar 31, 2026Appsup-dart

  JOSE is a Javascript Object Signing and Encryption (JOSE) library. Prior to version 0.3.5+1, a vulnerability in jose could allow an unauthenticated, remote attacker to forge valid JWS/JWT tokens by using a key embedded in the JOSE header (jwk). The vulnerabili