The following major versions are currently supported with security updates.
| Version | Security Fixes 🔑 |
|---|---|
| v6.x | ✅ |
| v5.x | ✅ |
| v4.x | ✅ |
| v2.x | ✅ |
You should report vulnerabilities using the Github UI or via email [email protected]
Security: panva/jose
Security
SECURITY.md
-
Resource exhaustion via specifically crafted JWE with compressed plaintextGHSA-hhhv-q57g-882q published
Mar 7, 2024 by panvaModerate -
Resource exhaustion via specifically crafted JWEGHSA-jv3g-j58f-9mq9 published
Sep 6, 2022 by panvaModerate -
Padding Oracle Attack due to Observable Timing Discrepancy in jose-node-esm-runtimeGHSA-4v4g-726h-xvfv published
Apr 15, 2021 by panvaModerate -
Padding Oracle Attack due to Observable Timing Discrepancy in jose-browser-runtimeGHSA-94hh-pjjg-rwmr published
Apr 15, 2021 by panvaModerate -
Padding Oracle Attack due to Observable Timing Discrepancy in jose-node-cjs-runtimeGHSA-rvcw-f68w-8h8h published
Apr 15, 2021 by panvaModerate -
Padding Oracle Attack due to Observable Timing Discrepancy in joseGHSA-58f5-hfqc-jgch published
Apr 15, 2021 by panvaModerate
Learn more about advisories related to panva/jose in the GitHub Advisory Database