jose vulnerabilities

1 known vulnerability in jose from Potatosalad. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.4 High severity

  jose: Use of Password Hash With Insufficient Computational Effort

  CVE-2026-65629Oct 26, 2026Potatosalad

  Use of Password Hash With Insufficient Computational Effort in the jose library allows an attacker who obtains a password-encrypted private-key export to recover the private key through an offline password-cracking attack. When jose exports a password-encrypte