Jose4j vulnerabilities

1 known vulnerability in Jose4j from Jose4j Project. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Jose4j: Improper Restriction of Security Token Assignment

  CVE-2024-29371Dec 17, 2025Jose4j Project

  In jose4j before 0.9.6, an attacker can cause a Denial-of-Service (DoS) condition by crafting a malicious JSON Web Encryption (JWE) token with an exceptionally high compression ratio. When this token is processed by the server, it results in significant memory