Nimbus JOSE+JWT vulnerabilities

1 known vulnerability in Nimbus JOSE+JWT from Connect2id. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Nimbus Jose+jwt: Allocation of Resources Without Limits or Throttling

  CVE-2023-52428Feb 11, 2024Connect2id

  In Connect2id Nimbus JOSE+JWT before 9.37.2, an attacker can cause a denial of service (resource consumption) via a large JWE p2c header value (aka iteration count) for the PasswordBasedDecrypter (PBKDF2) component.