CyberSecBulletin

Ulrikstrid vulnerabilities

We track 1 vulnerability in Ulrikstrid products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on February 1, 2023.

1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score

Latest Ulrikstrid vulnerabilities

  • 9.8 Critical severity

    reason-jose: Improper Verification of Cryptographic Signature

    CVE-2023-23928Ulrikstrid

    reason-jose is a JOSE implementation in ReasonML and OCaml.`Jose.Jws.validate` does not check HS256 signatures. This allows tampering of JWS header and payload data if the service does not perform additional checks. Such tampering could expose applications usi