Jose4j Project vulnerabilities
We track 1 vulnerability in Jose4j Project products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on December 17, 2025.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Jose4j Project vulnerabilities
- 7.5 High severity
Jose4j: Improper Restriction of Security Token Assignment
In jose4j before 0.9.6, an attacker can cause a Denial-of-Service (DoS) condition by crafting a malicious JSON Web Encryption (JWE) token with an exceptionally high compression ratio. When this token is processed by the server, it results in significant memory