node-jose vulnerabilities

1 known vulnerability in node-jose from Cisco. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  node-jose: Loop with Unreachable Exit Condition

  CVE-2023-25653Feb 16, 2023Cisco

  node-jose is a JavaScript implementation of the JSON Object Signing and Encryption (JOSE) for web browsers and node.js-based servers. Prior to version 2.2.0, when using the non-default "fallback" crypto back-end, ECC operations in `node-jose` can trigger a Den